Skip to content

Support authz policy enforcement in the bulkdata operation #2777

@lmsurpre

Description

@lmsurpre

Is your feature request related to a problem? Please describe.
A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]

Describe the solution you'd like

  1. Expand the FHIRPersistenceInterceptor interface to include beforeInvoke and afterInvoke methods
  2. Call these methods from FHIRRestHelper (or FHIRRestBundleHelper after robin's PR)
  3. Expand the fhir-smart module with support for enforcing the SMART scopes defined in the "SMART Backend Services" part of the bulkdata export spec.

Describe alternatives you've considered
Put the auth code right into fhir-operation-bulkdata.

Acceptance Criteria

  1. GIVEN [a precondition]
    AND [another precondition]
    WHEN [test step]
    AND [test step]
    THEN [verification step]
    AND [verification step]

Additional context
Add any other context or screenshots about the feature request here.

Metadata

Metadata

Assignees

Labels

enhancementNew feature or request

Type

No type
No fields configured for issues without a type.

Projects

No projects

Relationships

None yet

Development

No branches or pull requests

Issue actions