FHIR IG analytics| Package | hl7.fhir.uv.xver-r5.r4b |
| Resource Type | CodeSystem |
| Id | CodeSystem-permission-rule-combining.json |
| FHIR Version | R4B |
No resources found
No resources found
Note: links and images are rebased to the (stated) source
This code system
http://hl7.org/fhir/permission-rule-combining defines the following codes:
{
"resourceType": "CodeSystem",
"id": "permission-rule-combining",
"text": {
"status": "generated",
"div": "<!-- snip (see above) -->"
},
"extension": [
{
"url": "http://hl7.org/fhir/StructureDefinition/structuredefinition-standards-status",
"valueCode": "trial-use"
},
{
"url": "http://hl7.org/fhir/StructureDefinition/structuredefinition-fmm",
"valueInteger": 0
},
{
"extension": [
{
"url": "packageId",
"valueId": "hl7.fhir.uv.xver-r5.r4b"
},
{
"url": "version",
"valueString": "0.0.1-snapshot-2"
}
],
"url": "http://hl7.org/fhir/StructureDefinition/package-source"
},
{
"url": "http://hl7.org/fhir/StructureDefinition/structuredefinition-wg",
"valueCode": "sec"
}
],
"url": "http://hl7.org/fhir/permission-rule-combining",
"version": "5.0.0",
"name": "PermissionRuleCombining",
"title": "Permission Rule Combining",
"status": "active",
"experimental": false,
"date": "2022-08-05T09:01:24+10:00",
"publisher": "Security",
"contact": [
{
"name": "Security",
"telecom": [
{
"system": "url",
"value": "http://www.hl7.org/Special/committees/secure"
}
]
}
],
"description": "Codes identifying the rule combining. See XACML Combining algorithms http://docs.oasis-open.org/xacml/3.0/xacml-3.0-core-spec-cos01-en.html",
"jurisdiction": [
{
"coding": [
{
"system": "http://unstats.un.org/unsd/methods/m49/m49.htm",
"code": "001",
"display": "World"
}
]
}
],
"caseSensitive": true,
"content": "complete",
"concept": [
{
"code": "deny-overrides",
"display": "Deny-overrides",
"definition": "The deny overrides combining algorithm is intended for those cases where a deny decision should have priority over a permit decision."
},
{
"code": "permit-overrides",
"display": "Permit-overrides",
"definition": "The permit overrides combining algorithm is intended for those cases where a permit decision should have priority over a deny decision."
},
{
"code": "ordered-deny-overrides",
"display": "Ordered-deny-overrides",
"definition": "The behavior of this algorithm is identical to that of the “Deny-overrides” rule-combining algorithm with one exception. The order in which the collection of rules is evaluated SHALL match the order as listed in the permission."
},
{
"code": "ordered-permit-overrides",
"display": "Ordered-permit-overrides",
"definition": "The behavior of this algorithm is identical to that of the “Permit-overrides” rule-combining algorithm with one exception. The order in which the collection of rules is evaluated SHALL match the order as listed in the permission."
},
{
"code": "deny-unless-permit",
"display": "Deny-unless-permit",
"definition": "The “Deny-unless-permit” combining algorithm is intended for those cases where a permit decision should have priority over a deny decision, and an “Indeterminate” or “NotApplicable” must never be the result. It is particularly useful at the top level in a policy structure to ensure that a PDP will always return a definite “Permit” or “Deny” result."
},
{
"code": "permit-unless-deny",
"display": "Permit-unless-deny",
"definition": "The “Permit-unless-deny” combining algorithm is intended for those cases where a deny decision should have priority over a permit decision, and an “Indeterminate” or “NotApplicable” must never be the result. It is particularly useful at the top level in a policy structure to ensure that a PDP will always return a definite “Permit” or “Deny” result. This algorithm has the following behavior."
}
]
}