acl_setup.php

   1 <?php
   2  // Copyright (C) 2005 Rod Roark <rod@sunsetsystems.com>
   3  //
   4  // This program is free software; you can redistribute it and/or
   5  // modify it under the terms of the GNU General Public License
   6  // as published by the Free Software Foundation; either version 2
   7  // of the License, or (at your option) any later version.
   8
   9  // This program may be run after phpGACL has been installed, to
  10  // create the Access Control Objects and their sections as required
  11  // by OpenEMR.  Also created are some sample ARO groups, an "admin"
  12  // ARO, and some reasonable ACL entries for the groups.
  13
  14  include_once('library/acl.inc');
  15
  16  if (! $phpgacl_location) die("You must first set up library/acl.inc to use phpGACL!");
  17
  18  include_once("$phpgacl_location/gacl_api.class.php");
  19
  20  $gacl = new gacl_api();
  21
  22  // Create the ACO sections.  Every ACO must have a section.
  23  //
  24  $gacl->add_object_section('Accounting'    , 'acct'      , 10, 0, 'ACO');
  25  $gacl->add_object_section('Administration', 'admin'     , 10, 0, 'ACO');
  26  $gacl->add_object_section('Encounters'    , 'encounters', 10, 0, 'ACO');
  27  $gacl->add_object_section('Patients'      , 'patients'  , 10, 0, 'ACO');
  28  $gacl->add_object_section('Squads'        , 'squads'    , 10, 0, 'ACO');
  29
  30  // Create Accounting ACOs.
  31  //
  32  $gacl->add_object ('acct', 'Billing (write optional)'           , 'bill' , 10, 0, 'ACO');
  33  $gacl->add_object ('acct', 'EOB Data Entry'                     , 'eob'  , 10, 0, 'ACO');
  34  $gacl->add_object ('acct', 'Financial Reporting - my encounters', 'rep'  , 10, 0, 'ACO');
  35  $gacl->add_object ('acct', 'Financial Reporting - anything'     , 'rep_a', 10, 0, 'ACO');
  36
  37  // Create Administration ACOs.
  38  //
  39  $gacl->add_object ('admin', 'Superuser'                       , 'super'    , 10, 0, 'ACO');
  40  $gacl->add_object ('admin', 'Calendar Settings'               , 'calendar' , 10, 0, 'ACO');
  41  $gacl->add_object ('admin', 'Database Reporting'              , 'database' , 10, 0, 'ACO');
  42  $gacl->add_object ('admin', 'Forms Administration'            , 'forms'    , 10, 0, 'ACO');
  43  $gacl->add_object ('admin', 'Practice Settings'               , 'practice' , 10, 0, 'ACO');
  44  $gacl->add_object ('admin', 'Superbill Codes Administration'  , 'superbill', 10, 0, 'ACO');
  45  $gacl->add_object ('admin', 'Users/Groups/Logs Administration', 'users'    , 10, 0, 'ACO');
  46  $gacl->add_object ('admin', 'Batch Communication Tool'            , 'batchcom' , 10, 0, 'ACO');
  47  $gacl->add_object ('admin', 'Language Interface Tool'             , 'language' , 10, 0, 'ACO');
  48
  49  // Create ACOs for encounters.
  50  //
  51  $gacl->add_object ('encounters', 'Authorize - my encounters'                        , 'auth'    , 10, 0, 'ACO');
  52  $gacl->add_object ('encounters', 'Authorize - any encounters'                       , 'auth_a'  , 10, 0, 'ACO');
  53  $gacl->add_object ('encounters', 'Coding - my encounters (write,wsome optional)'    , 'coding'  , 10, 0, 'ACO');
  54  $gacl->add_object ('encounters', 'Coding - any encounters (write,wsome optional)'   , 'coding_a', 10, 0, 'ACO');
  55  $gacl->add_object ('encounters', 'Notes - my encounters (write,addonly optional)'   , 'notes'   , 10, 0, 'ACO');
  56  $gacl->add_object ('encounters', 'Notes - any encounters (write,addonly optional)'  , 'notes_a' , 10, 0, 'ACO');
  57  $gacl->add_object ('encounters', 'Fix encounter dates - any encounters'             , 'date_a'  , 10, 0, 'ACO');
  58  $gacl->add_object ('encounters', 'Less-private information (write,addonly optional)', 'relaxed' , 10, 0, 'ACO');
  59
  60  // Create ACOs for patients.
  61  //
  62  $gacl->add_object ('patients', 'Appointments (write optional)'           , 'appt' , 10, 0, 'ACO');
  63  $gacl->add_object ('patients', 'Demographics (write,addonly optional)'   , 'demo' , 10, 0, 'ACO');
  64  $gacl->add_object ('patients', 'Medical/History (write,addonly optional)', 'med'  , 10, 0, 'ACO');
  65  $gacl->add_object ('patients', 'Transactions (write optional)'           , 'trans', 10, 0, 'ACO');
  66  $gacl->add_object ('patients', 'Documents (write,addonly optional)'      , 'docs' , 10, 0, 'ACO');
  67  $gacl->add_object ('patients', 'Patient Notes (write,addonly optional)'  , 'notes', 10, 0, 'ACO');
  68
  69  // Create ARO groups.
  70  //
  71  $users = $gacl->add_group('users', 'OpenEMR Users' , 0     , 'ARO');
  72  $admin = $gacl->add_group('admin', 'Administrators', $users, 'ARO');
  73  $clin  = $gacl->add_group('clin' , 'Clinicians'    , $users, 'ARO');
  74  $doc   = $gacl->add_group('doc'  , 'Physicians'    , $users, 'ARO');
  75  $front = $gacl->add_group('front', 'Front Office'  , $users, 'ARO');
  76  $back  = $gacl->add_group('back' , 'Accounting'    , $users, 'ARO');
  77
  78  // Create a Users section for the AROs (humans).
  79  //
  80  $gacl->add_object_section('Users', 'users', 10, 0, 'ARO');
  81
  82  // Create the Administrator in the above-created "users" section
  83  // and add him/her to the above-created "admin" group.
  84  //
  85  $gacl->add_object('users', 'Administrator', 'admin' ,10, 0, 'ARO');
  86  $gacl->add_group_object($admin, 'users', 'admin', 'ARO');
  87
  88  // Set permissions for administrators.
  89  //
  90  $gacl->add_acl(
  91   array(
  92    'acct'=>array('bill', 'eob', 'rep', 'rep_a'),
  93    'admin'=>array('calendar', 'database', 'forms', 'practice', 'superbill', 'users','batchcom','language'),
  94    'encounters'=>array('auth_a', 'coding_a', 'notes_a', 'date_a'),
  95    'patients'=>array('appt', 'demo', 'med', 'trans', 'docs', 'notes')
  96   ),
  97   NULL, array($admin), NULL, NULL,
  98   1, 1, 'write', 'Administrators can do anything'
  99  );
 100
 101  // Set permissions for physicians.
 102  //
 103  $gacl->add_acl(
 104   array(
 105    'acct'=>array('rep'),
 106    'encounters'=>array('auth_a', 'coding_a', 'notes_a', 'date_a'),
 107    'patients'=>array('appt', 'demo', 'med', 'trans', 'docs', 'notes')
 108   ),
 109   NULL, array($doc), NULL, NULL,
 110   1, 1, 'write', 'Things that physicians can read and modify'
 111  );
 112
 113  // Set permissions for clinicians.
 114  //
 115  $gacl->add_acl(
 116   array(
 117    'encounters'=>array('notes', 'relaxed'),
 118    'patients'=>array('demo', 'med', 'docs', 'notes')
 119   ),
 120   NULL, array($clin), NULL, NULL,
 121   1, 1, 'addonly', 'Things that clinicians can read and enter but not modify'
 122  );
 123  $gacl->add_acl(
 124   array(
 125    'encounters'=>array('coding'),
 126    'patients'=>array('appt')
 127   ),
 128   NULL, array($clin), NULL, NULL,
 129   1, 1, 'write', 'Things that clinicians can read and modify'
 130  );
 131
 132  // Set permissions for front office staff.
 133  //
 134  $gacl->add_acl(
 135   array(
 136    'patients'=>array('appt', 'demo', 'trans', 'notes')
 137   ),
 138   NULL, array($front), NULL, NULL,
 139   1, 1, 'write', 'Things that front office can read and modify'
 140  );
 141
 142  // Set permissions for back office staff.
 143  //
 144  $gacl->add_acl(
 145   array(
 146    'acct'=>array('bill', 'eob', 'rep', 'rep_a'),
 147    'admin'=>array('practice', 'superbill'),
 148    'encounters'=>array('auth_a', 'coding_a', 'date_a'),
 149    'patients'=>array('appt', 'demo')
 150   ),
 151   NULL, array($back), NULL, NULL,
 152   1, 1, 'write', 'Things that back office can read and modify'
 153  );
 154
 155 ?>
 156 <html>
 157 <head>
 158 <title>OpenEMR ACL Setup</title>
 159 <link rel=STYLESHEET href="interface/themes/style_blue.css">
 160 </head>
 161 <body>
 162 <span class="title">OpenEMR ACL Setup</span>
 163 <br><br>
 164 <span class="text">
 165
 166 All done!
 167
 168 </span>
 169
 170 </body>
 171 </html>