*** empty log message ***
[openemr.git] / acl_setup.php
blob108cd61d7c52a9b119460385701a1d4f197cd775
1 <?php
2 // Copyright (C) 2005-2006 Rod Roark <rod@sunsetsystems.com>
3 //
4 // This program is free software; you can redistribute it and/or
5 // modify it under the terms of the GNU General Public License
6 // as published by the Free Software Foundation; either version 2
7 // of the License, or (at your option) any later version.
9 // This program may be run after phpGACL has been installed, to
10 // create the Access Control Objects and their sections as required
11 // by OpenEMR. Also created are some sample ARO groups, an "admin"
12 // ARO, and some reasonable ACL entries for the groups.
14 include_once('library/acl.inc');
16 if (! $phpgacl_location) die("You must first set up library/acl.inc to use phpGACL!");
18 include_once("$phpgacl_location/gacl_api.class.php");
20 $gacl = new gacl_api();
22 // Create the ACO sections. Every ACO must have a section.
24 $gacl->add_object_section('Accounting' , 'acct' , 10, 0, 'ACO');
25 $gacl->add_object_section('Administration', 'admin' , 10, 0, 'ACO');
26 $gacl->add_object_section('Encounters' , 'encounters' , 10, 0, 'ACO');
27 $gacl->add_object_section('Patients' , 'patients' , 10, 0, 'ACO');
28 $gacl->add_object_section('Squads' , 'squads' , 10, 0, 'ACO');
29 $gacl->add_object_section('Sensitivities' , 'sensitivities', 10, 0, 'ACO');
31 // Create Accounting ACOs.
33 $gacl->add_object('acct', 'Billing (write optional)' , 'bill' , 10, 0, 'ACO');
34 $gacl->add_object('acct', 'EOB Data Entry' , 'eob' , 10, 0, 'ACO');
35 $gacl->add_object('acct', 'Financial Reporting - my encounters', 'rep' , 10, 0, 'ACO');
36 $gacl->add_object('acct', 'Financial Reporting - anything' , 'rep_a', 10, 0, 'ACO');
38 // Create Administration ACOs.
40 $gacl->add_object('admin', 'Superuser' , 'super' , 10, 0, 'ACO');
41 $gacl->add_object('admin', 'Calendar Settings' , 'calendar' , 10, 0, 'ACO');
42 $gacl->add_object('admin', 'Database Reporting' , 'database' , 10, 0, 'ACO');
43 $gacl->add_object('admin', 'Forms Administration' , 'forms' , 10, 0, 'ACO');
44 $gacl->add_object('admin', 'Practice Settings' , 'practice' , 10, 0, 'ACO');
45 $gacl->add_object('admin', 'Superbill Codes Administration' , 'superbill', 10, 0, 'ACO');
46 $gacl->add_object('admin', 'Users/Groups/Logs Administration', 'users' , 10, 0, 'ACO');
47 $gacl->add_object('admin', 'Batch Communication Tool' , 'batchcom' , 10, 0, 'ACO');
48 $gacl->add_object('admin', 'Language Interface Tool' , 'language' , 10, 0, 'ACO');
50 // Create ACOs for encounters.
52 $gacl->add_object('encounters', 'Authorize - my encounters' , 'auth' , 10, 0, 'ACO');
53 $gacl->add_object('encounters', 'Authorize - any encounters' , 'auth_a' , 10, 0, 'ACO');
54 $gacl->add_object('encounters', 'Coding - my encounters (write,wsome optional)' , 'coding' , 10, 0, 'ACO');
55 $gacl->add_object('encounters', 'Coding - any encounters (write,wsome optional)' , 'coding_a', 10, 0, 'ACO');
56 $gacl->add_object('encounters', 'Notes - my encounters (write,addonly optional)' , 'notes' , 10, 0, 'ACO');
57 $gacl->add_object('encounters', 'Notes - any encounters (write,addonly optional)' , 'notes_a' , 10, 0, 'ACO');
58 $gacl->add_object('encounters', 'Fix encounter dates - any encounters' , 'date_a' , 10, 0, 'ACO');
59 $gacl->add_object('encounters', 'Less-private information (write,addonly optional)', 'relaxed' , 10, 0, 'ACO');
61 // Create ACOs for patients.
63 $gacl->add_object('patients', 'Appointments (write optional)' , 'appt' , 10, 0, 'ACO');
64 $gacl->add_object('patients', 'Demographics (write,addonly optional)' , 'demo' , 10, 0, 'ACO');
65 $gacl->add_object('patients', 'Medical/History (write,addonly optional)', 'med' , 10, 0, 'ACO');
66 $gacl->add_object('patients', 'Transactions (write optional)' , 'trans', 10, 0, 'ACO');
67 $gacl->add_object('patients', 'Documents (write,addonly optional)' , 'docs' , 10, 0, 'ACO');
68 $gacl->add_object('patients', 'Patient Notes (write,addonly optional)' , 'notes', 10, 0, 'ACO');
70 // Create ACOs for sensitivities.
72 $gacl->add_object('sensitivities', 'Normal', 'normal', 10, 0, 'ACO');
73 $gacl->add_object('sensitivities', 'High' , 'high' , 20, 0, 'ACO');
75 // Create ARO groups.
77 $users = $gacl->add_group('users', 'OpenEMR Users' , 0 , 'ARO');
78 $admin = $gacl->add_group('admin', 'Administrators', $users, 'ARO');
79 $clin = $gacl->add_group('clin' , 'Clinicians' , $users, 'ARO');
80 $doc = $gacl->add_group('doc' , 'Physicians' , $users, 'ARO');
81 $front = $gacl->add_group('front', 'Front Office' , $users, 'ARO');
82 $back = $gacl->add_group('back' , 'Accounting' , $users, 'ARO');
84 // Create a Users section for the AROs (humans).
86 $gacl->add_object_section('Users', 'users', 10, 0, 'ARO');
88 // Create the Administrator in the above-created "users" section
89 // and add him/her to the above-created "admin" group.
91 $gacl->add_object('users', 'Administrator', 'admin' ,10, 0, 'ARO');
92 $gacl->add_group_object($admin, 'users', 'admin', 'ARO');
94 // Set permissions for administrators.
96 $gacl->add_acl(
97 array(
98 'acct'=>array('bill', 'eob', 'rep', 'rep_a'),
99 'admin'=>array('calendar', 'database', 'forms', 'practice', 'superbill', 'users', 'batchcom', 'language', 'super'),
100 'encounters'=>array('auth_a', 'coding_a', 'notes_a', 'date_a'),
101 'patients'=>array('appt', 'demo', 'med', 'trans', 'docs', 'notes'),
102 'sensitivities'=>array('normal', 'high')
104 NULL, array($admin), NULL, NULL,
105 1, 1, 'write', 'Administrators can do anything'
108 // Set permissions for physicians.
110 $gacl->add_acl(
111 array(
112 'acct'=>array('rep'),
113 'encounters'=>array('auth_a', 'coding_a', 'notes_a', 'date_a'),
114 'patients'=>array('appt', 'demo', 'med', 'trans', 'docs', 'notes'),
115 'sensitivities'=>array('normal', 'high')
117 NULL, array($doc), NULL, NULL,
118 1, 1, 'write', 'Things that physicians can read and modify'
121 // Set permissions for clinicians.
123 $gacl->add_acl(
124 array(
125 'encounters'=>array('notes', 'relaxed'),
126 'patients'=>array('demo', 'med', 'docs', 'notes'),
127 'sensitivities'=>array('normal')
129 NULL, array($clin), NULL, NULL,
130 1, 1, 'addonly', 'Things that clinicians can read and enter but not modify'
132 $gacl->add_acl(
133 array(
134 'encounters'=>array('coding'),
135 'patients'=>array('appt')
137 NULL, array($clin), NULL, NULL,
138 1, 1, 'write', 'Things that clinicians can read and modify'
141 // Set permissions for front office staff.
143 $gacl->add_acl(
144 array(
145 'patients'=>array('appt', 'demo', 'trans', 'notes')
147 NULL, array($front), NULL, NULL,
148 1, 1, 'write', 'Things that front office can read and modify'
151 // Set permissions for back office staff.
153 $gacl->add_acl(
154 array(
155 'acct'=>array('bill', 'eob', 'rep', 'rep_a'),
156 'admin'=>array('practice', 'superbill'),
157 'encounters'=>array('auth_a', 'coding_a', 'date_a'),
158 'patients'=>array('appt', 'demo')
160 NULL, array($back), NULL, NULL,
161 1, 1, 'write', 'Things that back office can read and modify'
165 <html>
166 <head>
167 <title>OpenEMR ACL Setup</title>
168 <link rel=STYLESHEET href="interface/themes/style_blue.css">
169 </head>
170 <body>
171 <span class="title">OpenEMR ACL Setup</span>
172 <br><br>
173 <span class="text">
175 All done!
177 </span>
179 </body>
180 </html>