What will you learn?

• 
  Why ABAC exists, how it extends role-based models, and when it is the right approach for healthcare systems.
• 
  How the authorisation flow works between the policy enforcement point, the policy decision point, and the protected resource.
• 
  How the Policy Definition Language (PDL) works: its quantifiers, functions, and context variables, and how to compose readable rules.
• 
  How to model clinical relationships with parties and relations, and use relation chains for multi-hop access conditions.

• 
  How to bind policies to specific systems and operations, and test policy execution via the REST API.
• 
  How to use Kotlin scripts for authorisation logic that needs procedural code and access to EHR, FHIR, and other APIs.
• 
  How data extractors filter FHIR resources at query level, limiting what data a user receives rather than just allowing or denying a request.
• 
  How to combine roles, patient consent, and medical specialty into a multi-condition policy for a realistic clinical scenario.

Course details

About the educator