MUMPS DELPHI NAME TAG ROUTINE RETURN DESCRIPTION RETURN PARAMETER Procedure PARAMETER DESCRIPTION Name (Multiple) Locations Broker Name Parameter TYPE DG PTSEC DGSEC4 ARRAY This Remote RESULT(1) = DG patientlist RPCBroker1 -1-RPC/API failed Required Procedure Call variable not defined (RPC) will: 0-No display/action required Not RECORD - Verify user RECORD or an employee, not sensitive or not ACCESS is not accessing ACCESS' accessing own Patient record his/her own 1-Display warning message Patient file Sensitive - inpatient or a DG record if the 'DG or SENSITIVITY key holder or Restrict Patient Employee and DG SECURITY OFFICER key holder Record Access 2-Display warning message, (#1201) field in RECORD require OK to continue and call DG the MAS ACCESS' PType := literal; SENSITIVE RECORD BULLETIN parameters for all params RPC to update DG Security Log file (#43) file is set and generate Sensitive Record to yes and the RPCBroker1 Access mail message. Sensitive - user does not not an inpatient and not a key holder hold the DG or Employee/not a DG SECURITY OFFICER key holder RECORD PType := literal; 3-Access to record denied ACCESS Accessing own Patient file record security key. If 4-Access to Patient file (#2) parameter set to records denied SSN not defined yes and user is RESULT(2-n) = error message or not a key holder warning/Privacy , a social Act message. and warning security number messages will begin in RESULT(2) array. The Privacy Act message is must be defined the longest message and will utilize in the New RESULT(2)- RESULT(8). Person file for If RESULT(1)=1, the DG Security the user to Log file is updated. access any If RESULT(1)=2, the user must Patient file acknowledge they want to access the record. restricted record and the application - Determine if must call the DG SENSITIVE user accessing a RECORD BULLETIN RPC to sensitive record or update the DG Security Log file and an employee's generate the Sensitive Record Access record mail msg
MUMPS DELPHI NAME TAG ROUTINE RETURN TYPE DESCRIPTION PARAMETER (Multiple) RETURN PARAMETER DESCRIPTION Procedure Name Locations Broker Name Parameter DG RECORD ACCESS PTSEC DGSEC4 ARRAY This Remote Procedure Call (RPC) will: - Verify user is not accessing his/her own Patient file record if the Restrict Patient Record Access (#1201) field in the MAS parameters (#43) file is set to yes and the user does not hold the DG RECORD ACCESS security key. If parameter set to yes and user is not a key holder , a social security number must be defined in the New Person file for the user to access any Patient file record. - Determine if user accessing a sensitive record or an employee's record RESULT(1) = -1-RPC/API failed Required variable not defined 0-No display/action required Not an employee, not sensitive or not accessing own Patient record 1-Display warning message Sensitive - inpatient or a DG SENSITIVITY key holder or Employee and DG SECURITY OFFICER key holder 2-Display warning message, require OK to continue and call DG SENSITIVE RECORD BULLETIN RPC to update DG Security Log file and generate Sensitive Record Access mail message. Sensitive - not an inpatient and not a key holder or Employee/not a DG SECURITY OFFICER key holder 3-Access to record denied Accessing own Patient file record 4-Access to Patient file (#2) records denied SSN not defined RESULT(2-n) = error message or warning/Privacy Act message. and warning messages will begin in RESULT(2) array. The Privacy Act message is the longest message and will utilize RESULT(2)- RESULT(8). If RESULT(1)=1, the DG Security Log file is updated. If RESULT(1)=2, the user must acknowledge they want to access the restricted record and the application must call the DG SENSITIVE RECORD BULLETIN RPC to update the DG Security Log file and generate the Sensitive Record Access mail msg DG RECORD ACCESS' 'DG RECORD ACCESS' patientlist RPCBroker1 RPCBroker1 or or PType := literal; for all params PType := literal;
DVBA_27_P193_Sys_Adm.docx