Example of permission for SANER (id = "example-saner")

<?xml version="1.0" encoding="UTF-8"?>


  
  
    
    
      
    Read-Only access to SANER report is authorized for PurposeOfUse of Public-Health
         compliance, from the Organizations.
    Access requests authorized shall be recorded.  
    
       
    TODO: expression help. No access is granted to previous historic revisions
         (only current report).
    
       
    TODO: authorize a Group/P1. 
    
    
  
  

  
    
  
  
  

  
    

    
      
      
      
    
    
    
      
        
      
      
        
          
          
        
      
      
        
          
          
        
      
    
    
      
        
        
      
    
  

<!--  
        <p>
      Given the importance of current public health information, only the latest
 version of the report is
  authorized for access.
      </p>
  <rule>
    <type value="deny" />
    <data>
      <expression>
        <language value="text/fhirpath" />
        <expression value="meta.versionId.exists() and meta.versionId != 'latest'"
 />
      </expression>
    </data>
  </rule>
    --><Permission xmlns="http://hl7.org/fhir">
  <id value="example-saner"/>   <text>     <status value="generated"/> <div xmlns="http://www.w3.org/1999/xhtml">      <p> 
        Read-Only access to a given SANER report is authorized for PurposeOfUse
         of Public-Health
        compliance, from the given Organization.
        Access requests authorized shall be recorded.
      </p>       <p> 
        Read-Only access to a given SANER report is authorized for PurposeOfUse
         of Public-Health
        compliance, from the given Group.
        Access requests authorized shall be recorded.
      </p>     </div>   </text>   <identifier>     <system value="http://example.org/identifiers"/>     <value value="saner-report"/>   </identifier>   <status value="active"/>   <asserter>     <reference value="Organization/f203"/>   </asserter>   <date value="2018-12-24"/>   <combining value="deny-overrides"/>   <rule>     <type value="permit"/>     <data>       <resource>         <meaning value="instance"/>         <reference>           <reference value="http://hl7.org/fhir/uv/saner/Measure/CDCHealthcareSupplyPathway"/>         </reference>       </resource>     </data>     <activity>       <actor>         <reference>           <reference value="Organization/f203"/>         </reference>       </actor>       <action>         <coding>           <system value="http://terminology.hl7.org/CodeSystem/consentaction"/>           <code value="access"/>         </coding>       </action>       <purpose>         <coding>           <system value="http://terminology.hl7.org/CodeSystem/v3-ActReason"/>           <code value="HCOMPL"/>         </coding>       </purpose>     </activity>     <limit>       <control>         <coding>           <system value="http://terminology.hl7.org/CodeSystem/v3-ActCode"/>           <code value="AUDIT"/>         </coding>       </control>     </limit>   </rule>   <rule>     <type value="permit"/>     <data>       <resource>         <meaning value="instance"/>         <reference>           <reference value="http://hl7.org/fhir/uv/saner/Measure/CDCHealthcareSupplyPathway"/>         </reference>       </resource>     </data>     <activity>       <actor>         <reference>           <reference value="Group/102"/>         </reference>       </actor>       <action>         <coding>           <system value="http://terminology.hl7.org/CodeSystem/consentaction"/>           <code value="access"/>         </coding>       </action>       <purpose>         <coding>           <system value="http://terminology.hl7.org/CodeSystem/v3-ActReason"/>           <code value="HCOMPL"/>         </coding>       </purpose>     </activity>     <limit>       <control>         <coding>           <system value="http://terminology.hl7.org/CodeSystem/v3-ActCode"/>           <code value="AUDIT"/>         </coding>       </control>     </limit>   </rule> 


</

Permission

>