HUMS Hospital

Description:

Issue: Patient record privacy lock does not cascade to Past Visits, History, SOAP Notes, OP Notes, Nursing Notes, and Discharge Summary. These remain visible to users outside the restricted access group.

Expected Behavior : Privacy lock should apply to all related modules. Only users in the restricted group can view them.

Steps to Reproduce:

Apply privacy lock on a patient record.

Navigate to Past Visits, History, SOAP Notes, OP Notes, Nursing Notes, or Discharge Summary.

Content is still accessible to unauthorized users.

Impact : High risk of confidentiality breach and non‑compliance with hospital privacy policy.
Requirements:

Cascade privacy lock across all clinical notes/history modules.

Restrict visibility to authorized group only.

Display message “This document is restricted due to privacy settings” for unauthorized users.

Add audit trail logging for access attempts during privacy lock