Gaps #94032
openPHIS > Implement Password Authentication for Dangerous Drug (DD) Prescription and Verification
Description
Issues Description:
Currently, the system allows doctors to prescribe Dangerous Drugs (DD) and pharmacists to verify DD prescriptions without additional password authentication. As DD medications are controlled substances, an extra layer of security is required to ensure that only authorized users can perform these actions and that all activities are properly audited.
The system should prompt users to enter their password during:
1. Doctor prescription/order of Dangerous Drug (DD).
2. Pharmacist verification of Dangerous Drug (DD).
This requirement is intended to enhance security, accountability, and compliance with medication control procedures.
Step to reproduce:
1.Login System
2.Navigate to > OP consult & In-patient
3.Click on Medication Order
4.Doctor order Dangerous Drug (DD)
5.PHIS > Pharmacist verify the order.
6.Observe screen > the system allows doctors to prescribe Dangerous Drugs (DD) and pharmacists to verify DD prescriptions without additional password authentication.
Expectation:
The system should display a password authentication pop-up when:
1. A doctor attempts to prescribe/order a Dangerous Drug (DD).
2. A pharmacist attempts to verify a Dangerous Drug (DD) prescription.
The user must enter a valid password before proceeding. If the password is incorrect, the system should display an error message and prevent the action from being completed. All successful authentications should be recorded in the audit trail.
Picture 1: The expectation prompt at CLINICARE
Picture 2: The expectation prompt at MEDCARE (Medication Outpatient)
Picture 3: The expectation prompt at MEDCARE (Patient Consumption)
Picture 4: Error Message (Wrong Password)
Picture 5: Success Message
Files