Project

General

Profile

Actions

Bug #92655

open

Clinicare > OP Nursing > Progress Note > Nurses log in are able to enter notes on DR's progress. Nurses should only have read-only access to Progress Note. Unable to configure on OP Consult settings.note.

Added by Marcella David Kok 7 months ago. Updated 3 months ago.

Status:
Deployed
Priority:
Critical
Assignee:
Marcella David Kok
Category:
CliniCare
Target version:
-
Start date:
02/04/2026
Due date:
% Done:

0%

Estimated time:
Dev Due date:
01/08/2026
Release date to QA:
01/08/2026
Bug/Defect On:
Development
Severity:
Critical
Issue released on:
HUMS SandBox
Function:

Description

Nurse able to add in progress note (doctor's progress note) where as nurse note exist in section.


Files

Actions #1

Updated by Marcella David Kok 7 months ago

  • Assignee changed from Kierthini Nethi to Daniyal Ansari
Actions #2

Updated by Daniyal Ansari 7 months ago

  • Assignee changed from Daniyal Ansari to Amirali Mahjour
Actions #3

Updated by Kierthini Nethi 7 months ago

  • Priority changed from High to Critical
  • Function HUMS added
Actions #4

Updated by Kierthini Nethi 7 months ago

  • Tracker changed from Task to Bug
  • Severity set to Critical
  • Function deleted (HUMS)
Actions #5

Updated by Kierthini Nethi 7 months ago

  • Category changed from M OPD to CliniCare
Actions #6

Updated by Kierthini Nethi 7 months ago ยท Edited

  • Subject changed from OPD progress note entry to Clinicare > OP Nursing > Progress Note > Nurses log in are able to enter notes on DR's progress. Nurses should only have read-only access to Progress Note. Unable to configure on OP Consult settings.note.

NAVIGATION
USER MANAGEMENT > OP NURSING ACCESS RIGHTS

Description:
The initial issue was due to configuration being applied only to the OP Nurse role. Upon further review:

Login 1081 is assigned the ED Nurse role
Login 1082 is assigned the Nurse role

Both roles have now been updated with identical permissions (as per the referenced configuration/screenshot), and the Save button has been removed from Progress Notes for both roles.

Issue:
Despite the Save button being removed, users are still able to save data via the draft functionality. This behavior bypasses the intended restriction and allows data persistence.

Expected Behavior:
When the Save button is disabled/removed based on role permissions, users should not be able to save Progress Notes in any form, including via draft functionality.

Actual Behavior:
Data continues to be saved through the draft mechanism even when the Save option is not available.

Impact:
This creates a permissions loophole where users can still store data despite restricted access controls.

Action Required:
Kindly investigate and restrict the draft functionality in alignment with role-based permissions to prevent unintended data saving.

Actions #7

Updated by Mehdi Mehdi 4 months ago

  • Release date to QA set to 01/08/2026
Actions #8

Updated by Mehdi Mehdi 4 months ago

  • Dev Due date set to 01/08/2026
Actions #9

Updated by Amirali Mahjour 4 months ago

No code change needed for this one. It's an access-rights setting.

Examination Note is already marked read-only for the nurse role, Progress Note isn't. That's the whole difference. Both components go through the same permission check in the casesheet, so setting it gives us the same behaviour.

How to set it:
Go to Users > Access Rights > OP Nursing Access Right. Pick the nurse role in the dropdown at the top, then scroll to the "Examination (Objective)" section and find the Progress Note row. Leave "Has Access" ticked so nurses can still read existing notes, and tick "Is Read only". Save. Compare the row with Examination Note in the same section, they should look the same now. Repeat for any other nurse roles.

After saving, log in as a nurse and check both the OP nursing casesheet and the ER casesheet. The Progress Note card should still list the existing notes but the "+" button should be gone. Also check as a doctor that the "+" is still there.

If the "+" is still showing for the nurse after saving, check the role identifier stored in the config against the one in the user's profile, they need to match exactly or the check silently passes.

Actions #10

Updated by Amirali Mahjour 4 months ago

  • Status changed from New to Coded

Updated by Marcella David Kok 4 months ago

Action done:
LOG IN AS ADMIN USER> 9 DOTS> CLINICAL OP NURSING> USER MANAGEMENT> PRIVILEGES> OP NURSING ACCESS RIGHTS> SELECT NURSE ROLES> EXAMINATION> PROGRESS NOTE> SELECT HAS ACCESS & READ ONLY

IMAGE 1
LOG IN AS ADMIN USER> 9 DOTS

IMAGE 2
CLINICAL OP NURSING> USER MANAGEMENT

IMAGE 3
PRIVILEGES> OP NURSING ACCESS RIGHTS

IMAGE 4
SELECT NURSE ROLES

IMAGE 5
EXAMINATION> PROGRESS NOTE> SELECT HAS ACCESS & READ ONLY (NURSE IN GENERAL)

IMAGE 6
EXAMINATION> PROGRESS NOTE> SELECT HAS ACCESS & READ ONLY (OP NURSE)

IMAGE 7
AFTER ACCESS CHANGED, NURSE ONLY ABLE TO VIEW DOCTOR'S PROGRESS NOTE IN OP NURSING MODULE.

IMAGE 8
OP DOCTOR ACCESS TO ADD NOTES REMAINS ACTIVE.

RESULTS TESTING SANDBOX: PASS
*After changes of OP nursing access right to read-only, op nurse is only able to read the doctor's progress note. Meanwhile, the OP doctor access to add in notes remain active. *

Actions #12

Updated by Marcella David Kok 4 months ago

  • Assignee changed from Amirali Mahjour to Marcella David Kok
Actions #13

Updated by Marcella David Kok 3 months ago

  • Status changed from Tested to Deployed
  • Issue released on HUMS SandBox added
  • Issue released on deleted (NA)
Actions

Also available in: Atom PDF