Project

General

Profile

Actions

Gaps #94170

open

Gaps #94032: PHIS > Implement Password Authentication for Dangerous Drug (DD) Prescription and Verification

CLINICARE ON OP / IP / ER > Implement Password Authentication for Dangerous Drug (DD) Prescription

Added by Nur'Ain Binti Karim 5 months ago. Updated 5 months ago.

Status:
Re-open
Priority:
Critical
Assignee:
Category:
CliniCare
Target version:
-
Start date:
18/06/2026
Due date:
% Done:

0%

Estimated time:
Spent time:
Dev Due date:
20/06/2026
Release date to QA:
Issue released on:
HUMS SandBox
Function:

Description

Issues Description:
Currently, the system allows doctors to prescribe Dangerous Drugs (DD) and pharmacists to verify DD prescriptions without additional password authentication. As DD medications are controlled substances, an extra layer of security is required to ensure that only authorized users can perform these actions and that all activities are properly audited. The system should prompt users to enter their password during doctor prescription/order of Dangerous Drug (DD).

This requirement is intended to enhance security, accountability, and compliance with medication control procedures.

Step to reproduce:
1.Login System
2.Navigate to > OP consult & In-patient
3.Click on Medication Order
4.Doctor order Dangerous Drug (DD)
5.Observe screen > the system allows doctors to prescribe Dangerous Drugs (DD) and pharmacists to verify DD prescriptions without additional password authentication.

Expectation:
The system should display a password authentication pop-up when a doctor attempts to prescribe/order a Dangerous Drug (DD). The user must enter a valid password before proceeding. If the password is incorrect, the system should display an error message and prevent the action from being completed. All successful authentications should be recorded in the audit trail.

Picture 1: The expectation prompt at CLINICARE

Picture 2: Error Message (Wrong Password)

Picture 3: Success Message


Files

clipboard-202606181113-hn1fe.png (194 KB) clipboard-202606181113-hn1fe.png Nur'Ain Binti Karim, 18/06/2026 11:13 AM
clipboard-202606181114-4yiwz.png (7.97 KB) clipboard-202606181114-4yiwz.png Nur'Ain Binti Karim, 18/06/2026 11:14 AM
clipboard-202606181114-jhfya.png (7.19 KB) clipboard-202606181114-jhfya.png Nur'Ain Binti Karim, 18/06/2026 11:14 AM
Screenshot 2026-06-22 at 8.31.58 AM.png (431 KB) Screenshot 2026-06-22 at 8.31.58 AM.png Sajad Abbasi, 22/06/2026 01:02 PM
clipboard-202606241649-x29jz.png (193 KB) clipboard-202606241649-x29jz.png Harshada Dixit, 24/06/2026 04:49 PM
clipboard-202606241650-b2vs1.png (199 KB) clipboard-202606241650-b2vs1.png Harshada Dixit, 24/06/2026 04:50 PM
clipboard-202606241650-asc8w.png (176 KB) clipboard-202606241650-asc8w.png Harshada Dixit, 24/06/2026 04:50 PM
Actions #1

Updated by Sarfrazul Haque 5 months ago

  • Assignee changed from Mehdi Mehdi to Sajad Abbasi
  • Dev Due date set to 20/06/2026
Actions #2

Updated by Sajad Abbasi 5 months ago

To handle it on frontend, two changes needed.

1. Adding a new property named <"isDangerousDrug": boolean> to this endpoint "dev.hatiintl.com.my/core/orderable/drug/item/top"

2. A new endpoint needed for password confirmation.

Actions #3

Updated by Mehdi Mehdi 5 months ago

ALTER TABLE medication_attribute ADD COLUMN is_dangerous_drug BOOLEAN;
update medication_attribute ma set is_dangerous_drug = false ;
select * from medication_attribute ;

@Sajad Abbasi
is_dangerous_drug is added to the controller .

Regarding the password authentication requirement, we do not need to create a new endpoint. Please utilize the existing login API and validate the user's credentials based on its response.

Actions #4

Updated by Sajad Abbasi 5 months ago

Actions #5

Updated by Sajad Abbasi 5 months ago

  • Status changed from Assigned to Coded
Actions #6

Updated by Mehdi Mehdi 5 months ago

  • Status changed from Coded to QA
Actions #7

Updated by Mehdi Mehdi 5 months ago

  • Assignee changed from Sajad Abbasi to Mangesh Pangrekar

Updated by Harshada Dixit 5 months ago

CLINICARE ON OP / IP / ER > Implement Password Authentication for Dangerous Drug (DD) Prescription - FAIL

OP/IP/ER - While placing DD order password authentication pop-up not showing , without any alerts able to place order.



Actions

Also available in: Atom PDF