Audit rows record the user, IP address, workstation and before/after values in the same transaction as the change, and a Verify integrity button checks the hash chain. The application's database login has no right to update or delete audit rows.
Passwords use Argon2id and must be changed at first sign-in. Doctors see only their own patients, work and commissions, enforced in the database query, and attempts to see others are refused and audited.
What's included
- Granular permissions; editable roles; users can hold several roles
- Every endpoint checked on the server; a build test fails if one has no permission
- Append-only, SHA-256 hash-chained audit with before/after values
- Supervisor approval for discounts, price changes, credit overrides, voids and refunds
- Lockout after failed logins, idle timeout and sign out everywhere
- Accounting maker-checker covers manual journals and payments above the threshold
- Readable activity log alongside the technical audit
- Supports the clinic's Data Privacy Act program with access control, audited views and encrypted backups