From 85fabfcc928e6721f01dadb45b2d4cd207ba35d8 Mon Sep 17 00:00:00 2001
From: inportb <inportb@gmail.com>
Date: Sat, 1 Oct 2022 01:45:17 -0400
Subject: [PATCH] Restricted record check

---
 htdocs/RoutePatientDetail.vue | 21 ++++++++++++++-------
 htdocs/vistax.mjs             |  7 +++++++
 2 files changed, 21 insertions(+), 7 deletions(-)

diff --git a/htdocs/RoutePatientDetail.vue b/htdocs/RoutePatientDetail.vue
index d973e2c..5d9c7c4 100644
--- a/htdocs/RoutePatientDetail.vue
+++ b/htdocs/RoutePatientDetail.vue
@@ -1,4 +1,9 @@
 <template>
+	<div v-if="(sensitive) && (!info)" class="alert alert-danger text-center mb-3 shadow" role="alert">
+		<h1>Warning: Restricted Record</h1>
+		<p>This record is protected by the Privacy Act of 1974 and the Health Insurance Portability and Accountability Act of 1996. If you elect to proceed, you will be required to prove you have a need to know. Accessing this patient is tracked, and your station Security Officer will contact you for your justification.</p>
+		<router-link class="btn btn-danger" :to="'/patient/' + dfn + '?viewsensitive'">Proceed</router-link>
+	</div>
 	<div v-if="info">
 		<div class="card mb-3 shadow">
 			<div class="card-header">{{info.name}} <span :title="info.pid">{{info.pid.slice(-4)}}</span> #{{dfn}}</div>
@@ -52,6 +57,7 @@
 		data() {
 			return {
 				dfn: null,
+				sensitive: false,
 				info: null,
 				report_date: now,
 				report_date_begin: now,
@@ -66,7 +72,12 @@
 			}
 		},
 		methods: {
-			strptime_vista
+			strptime_vista,
+			async loadinfo(dfn, viewsensitive) {
+				this.dfn = dfn;
+				this.sensitive = viewsensitive ? false : await this.client.ORWPT_SELCHK(dfn);
+				this.info = this.sensitive ? null : await this.client.ORWPT16_ID_INFO(dfn);
+			}
 		},
 		async mounted() {
 			if(this.$route.params.id.startsWith('$')) {
@@ -82,14 +93,10 @@
 						break;
 					}
 				}
-			} else {
-				this.dfn = this.$route.params.id;
-				this.info = await this.client.ORWPT16_ID_INFO(this.$route.params.id);
-			}
+			} else this.loadinfo(this.$route.params.id, this.$route.query.hasOwnProperty('viewsensitive'));
 		},
 		async beforeRouteUpdate(to, from, next) {
-			this.dfn = to.params.id;
-			this.info = await this.client.ORWPT16_ID_INFO(to.params.id);
+			this.loadinfo(to.params.id, to.query.hasOwnProperty('viewsensitive'));
 			next();
 		}
 	};
diff --git a/htdocs/vistax.mjs b/htdocs/vistax.mjs
index d49e4fc..21d2da7 100644
--- a/htdocs/vistax.mjs
+++ b/htdocs/vistax.mjs
@@ -48,6 +48,12 @@ export function memoized(fn) {
 	}
 }
 
+export function converted_boolean(fn, columns=null) {
+	return async function(...args) {
+		return await fn(...args) == '1';
+	}
+}
+
 export function caretseparated(fn, columns=null) {
 	return async function(...args) {
 		if(columns) return (await fn(...args)).map(function(row) {
@@ -142,6 +148,7 @@ export function Client(cid, secret) {
 	this.ORWPT_FULLSSN = memoized(caretseparated(unwrapped(logged((...args) => this.callctx(['OR CPRS GUI CHART'], 'ORWPT_FULLSSN', ...args), 'ORWPT_FULLSSN')), ['dfn', 'name', 'date', 'pid']));
 	this.ORWPT_LAST5 = memoized(caretseparated(unwrapped(logged((...args) => this.callctx(['OR CPRS GUI CHART'], 'ORWPT_LAST5', ...args), 'ORWPT_LAST5')), ['dfn', 'name', 'date', 'pid']));
 	this.ORWPT_ID_INFO = memoized(caretseparated1(unwrapped(logged((...args) => this.callctx(['OR CPRS GUI CHART'], 'ORWPT_ID_INFO', ...args), 'ORWPT_ID_INFO')), ['pid', 'dob', 'sex', 'vet', 'sc_percentage', 'ward', 'room_bed', 'name']));
+	this.ORWPT_SELCHK = memoized(converted_boolean(unwrapped(logged((...args) => this.callctx(['OR CPRS GUI CHART'], 'ORWPT_SELCHK', ...args), 'ORWPT_SELCHK'))));
 	this.ORWPT16_LOOKUP = memoized(caretseparated(unwrapped(logged((...args) => this.callctx(['OR CPRS GUI CHART'], 'ORWPT16_LOOKUP', ...args), 'ORWPT16_LOOKUP')), ['dfn', 'name', 'pid']));
 	this.ORWPT16_ID_INFO = memoized(caretseparated1(unwrapped(logged((...args) => this.callctx(['OR CPRS GUI CHART'], 'ORWPT16_ID_INFO', ...args), 'ORWPT16_ID_INFO')), ['pid', 'dob', 'age', 'sex', 'sc_percentage', 'type', 'ward', 'room_bed', 'name']));