Stream: implementers
Topic: Why can't Person be a member of Group?
Michael Lawley (Jul 01 2020 at 00:56):
What is the rationale for excluding Person as a Group member?
http://hl7.org/fhir/group-definitions.html#Group.member.entity
Josh Mandel (Jul 01 2020 at 01:02):
The rationale is that groups can only include "participant" type actors, and Person isn't one. That's the party line (I believe).
John Moehrke (Jul 01 2020 at 01:09):
correct. person is mostly just for linking, not for agency
Michael Lawley (Jul 01 2020 at 12:29):
Doesn't anyone who might use a FHIR API have agency?
Use case one refers to "healthcare-related activities" which seems pretty broad and covers "tracked, examined or otherwise referenced" which is also pretty broad and beyond the "provision of healthcare" that participant constrains to.
Josh Mandel (Jul 01 2020 at 13:10):
yes I think anyone who uses an API has agency; let's talk about specific examples to see whether they are covered by the more specific participant types.
John Moehrke (Jul 01 2020 at 13:47):
a user is a user. They might be acting in a persona of Patient, in a persona as Practitioner, in a persona as etc... One must set their persona first. Person is a persona -less container. --- NOTE also that Practitioner is not specific to licensed healthcare clinicians, Practitioner is the generic resource for a user (other than Patient persona, or the other agent based resources). @Lloyd McKenzie has pointed this out elsewhere that the janitor would be represented as a Practitioner persona. So the Resource you are likely looking for is Practitioner
Michael Lawley (Jul 02 2020 at 02:31):
My people are mostly terminology resource authors - what is the appropriate persona? But AFAICT, Practitioner is about "provision of healthcare" -- that does not seem (to me) to apply (nor to a hospital janitor). If it really does, then these sorts of broad cases should be included in the list of examples (which are currently all, except the strangely specific IT one, about healthcare to the patient). Other useful examples, if they count, would be secondary users of data.
Grahame Grieve (Jul 02 2020 at 02:32):
SCIM user is the appropriate resource at this time
John Moehrke (Jul 02 2020 at 12:15):
I was surprised too when I heard that Practitioner was intended for everyone doing any job. I think the narrative text you are seeing is based on the simple fact that the early modeling of FHIR came mostly (99%) from clinical care perspective; where as now we have other perspectives such as research, public-health, etc.. in scope.
John Moehrke (Jul 02 2020 at 12:15):
write a good and persuasive change request
Josh Mandel (Jul 07 2020 at 14:13):
SCIM user is the appropriate resource at this time
Wait, is this a resource and can it belong to a Group? Or is your intention to tell @Michael Lawley that what he is doing is out of scope for FHIR, @Grahame Grieve ?
Grahame Grieve (Jul 07 2020 at 22:18):
SCIM user is a resource, but not a FHIR resource.
SCIM also has a group resource.
yes, what he is trying to do is something that we have repeatedly ruled out of scope for FHIR
Michael Lawley (Jul 09 2020 at 04:46):
Ok, I came to this issue from the perspective of trying to solve a authZ problem, but there does seem to be ambiguity / lack of clarity and consensus around scope here -- e.g., the janitor example above.
Josh Mandel (Jul 09 2020 at 14:21):
Agreed. I wonder if it's possible to take a stab and defining when FHIR Groups should be used and when they shouldn't be used, in scenarios related to access control and authorization.
Like, if I wanted to use a Group to define patients associated with a given clinic... and then grant permissions based on that Group, I assume that's OK? But if I wanted to use a Group to define a list of practitioners at that clinic, and then grant permissions based on that group... this wouldn't be OK?
Lloyd McKenzie (Jul 09 2020 at 14:22):
If the group of practitioners can't take collective action or responsibility and is defined by a set of criteria, no issue using Group. As a Group, they can be subject of actions, but can't be author/performer.
Last updated: Apr 12 2022 at 19:14 UTC