Gaps #94170
openGaps #94032: PHIS > Implement Password Authentication for Dangerous Drug (DD) Prescription and Verification
CLINICARE ON OP / IP / ER > Implement Password Authentication for Dangerous Drug (DD) Prescription
Description
Issues Description:
Currently, the system allows doctors to prescribe Dangerous Drugs (DD) and pharmacists to verify DD prescriptions without additional password authentication. As DD medications are controlled substances, an extra layer of security is required to ensure that only authorized users can perform these actions and that all activities are properly audited. The system should prompt users to enter their password during doctor prescription/order of Dangerous Drug (DD).
This requirement is intended to enhance security, accountability, and compliance with medication control procedures.
Step to reproduce:
1.Login System
2.Navigate to > OP consult & In-patient
3.Click on Medication Order
4.Doctor order Dangerous Drug (DD)
5.Observe screen > the system allows doctors to prescribe Dangerous Drugs (DD) and pharmacists to verify DD prescriptions without additional password authentication.
Expectation:
The system should display a password authentication pop-up when a doctor attempts to prescribe/order a Dangerous Drug (DD). The user must enter a valid password before proceeding. If the password is incorrect, the system should display an error message and prevent the action from being completed. All successful authentications should be recorded in the audit trail.
Picture 1: The expectation prompt at CLINICARE
Picture 2: Error Message (Wrong Password)
Picture 3: Success Message
Files
Updated by Sarfrazul Haque 5 months ago
- Assignee changed from Mehdi Mehdi to Sajad Abbasi
- Dev Due date set to 20/06/2026
Updated by Sajad Abbasi 5 months ago
To handle it on frontend, two changes needed.
1. Adding a new property named <"isDangerousDrug": boolean> to this endpoint "dev.hatiintl.com.my/core/orderable/drug/item/top"
2. A new endpoint needed for password confirmation.
Updated by Mehdi Mehdi 5 months ago
ALTER TABLE medication_attribute ADD COLUMN is_dangerous_drug BOOLEAN;
update medication_attribute ma set is_dangerous_drug = false ;
select * from medication_attribute ;
@Sajad Abbasi
is_dangerous_drug is added to the controller .
Regarding the password authentication requirement, we do not need to create a new endpoint. Please utilize the existing login API and validate the user's credentials based on its response.
Updated by Sajad Abbasi 5 months ago
- File Screenshot 2026-06-22 at 8.31.58 AM.png Screenshot 2026-06-22 at 8.31.58 AM.png added
- Status changed from New to Assigned
Updated by Mehdi Mehdi 5 months ago
- Assignee changed from Sajad Abbasi to Mangesh Pangrekar
Updated by Harshada Dixit 5 months ago
- File clipboard-202606241649-x29jz.png clipboard-202606241649-x29jz.png added
- File clipboard-202606241650-b2vs1.png clipboard-202606241650-b2vs1.png added
- File clipboard-202606241650-asc8w.png clipboard-202606241650-asc8w.png added
- Status changed from QA to Re-open
- Assignee changed from Mangesh Pangrekar to Mehdi Mehdi
CLINICARE ON OP / IP / ER > Implement Password Authentication for Dangerous Drug (DD) Prescription - FAIL
OP/IP/ER - While placing DD order password authentication pop-up not showing , without any alerts able to place order.


