hims-rbac-abac

What problem does it solve?

This Skill addresses the critical need for robust and fine-grained authorization within Hospital Information Management Systems (HIMS), ensuring that users only have access to the data and functionalities necessary for their roles, while also incorporating dynamic, context-aware security policies.

Core Features & Use Cases

• Role-Based Access Control (RBAC): Defines and reviews permissions for standard healthcare roles (doctor, nurse, receptionist, billing, etc.).
• Attribute-Based Access Control (ABAC): Implements dynamic authorization based on attributes like facility, department, shift, and emergency status.
• Zero-Trust Principles: Enforces least privilege and contextual authorization.
• Emergency Override: Manages secure "break-glass" procedures with justification and auditing.
• Use Case: Reviewing and designing the authorization policies for a new telemedicine feature, ensuring only authorized doctors can access patient records during a virtual consultation, and that access is restricted to the patient's specific facility and department.

Quick Start

Design an RBAC + ABAC policy for a hospital pharmacist role.