@@ -218,26 +218,39 @@ def authorization_callback():
218218 scopes = auth_token.scope
219219
220220 # iterate scope entries here or check if a permission is in the scope
221- if " patient/Patient.read" in scopes:
222- # patient info access granted
221+ if " patient/Patient.r" in scopes:
222+ # patient read access granted, similarly can check:
223+ # "patient/Patient.s", or "patient/Patient.rs"
223224
224225 """
225226 1. access token scope where demographic info included:
226227
227228 scope: [
228- "patient/Coverage.read",
229- "patient/ExplanationOfBenefit.read",
230- "patient/Patient.read",
231- "profile",
232- "openid",
229+ "profile",
230+ "openid",
231+ "patient/Patient.r",
232+ "patient/Patient.s",
233+ "patient/Patient.rs",
234+ "patient/ExplanationOfBenefit.r",
235+ "patient/ExplanationOfBenefit.s",
236+ "patient/ExplanationOfBenefit.rs",
237+ "patient/Coverage.r",
238+ "patient/Coverage.s",
239+ "patient/Coverage.rs",
240+ "launch/patient",
233241 ]
234242
235243 2. access token scope where demographic info not included:
236244
237245 scope: [
238- "patient/Coverage.read",
239- "patient/ExplanationOfBenefit.read",
240246 "openid",
247+ "patient/ExplanationOfBenefit.r",
248+ "patient/ExplanationOfBenefit.s",
249+ "patient/ExplanationOfBenefit.rs",
250+ "patient/Coverage.r",
251+ "patient/Coverage.s",
252+ "patient/Coverage.rs",
253+ "launch/patient",
241254 ]
242255 """
243256 config = {
0 commit comments