SAP ABAP IMG Activity SIMG_ISHMED_OD02 (Maintain authorization)
Hierarchy
BBPCRM (Software Component) BBPCRM
   CRM (Application Component) Customer Relationship Management
     CRM_APPLICATION (Package) All CRM Components Without Special Structure Packages
       NMED (Package) R/3MED: Medical documentation GSD
IMG Activity
ID SIMG_ISHMED_OD02 Maintain authorization  
Transaction Code S_KK4_74000635   IMG Activity: SIMG_ISHMED_OD02 
Created on 19990816    
Customizing Attributes SIMG_ISHMED_OD02   Maintain authorization 
Customizing Activity SIMG_ISHMED_OD02   Maintain authorization 
Document
Document Class SIMG   Hypertext: Object Class - Class to which a document belongs.
Document Name SIMG_ISHMED_OD02    

With the introduction of the treatment 'contract' (or obligation) as dynamic authorization, you can decide in Customizing whether you wish to make additional use of this authorization check which is specifically for hospitals.

This section shows you which

SAP authorization objects are to be used for individual functions of the clinical documentation. In the SAP System, you can maintain authorizations for these objects.

The authorization for a function of the medical documentation is checked via the permitted transaction code for each institution using the autorization object N_EINR_TCO. The check takes place in the initial screen of the medical document management.

The document type is a central control instrument for dividing the document categories according to their characteristic features and the organizational flow processes which result. A status network can be used to control the processing flow in document management. An authorization for the authorization object C_DRAW_TCD must be provided in order to be able create, maintain or display document management data. For each document type you can control which activity is permitted: Create, change, display and delete document. For Customizing purposes you can decide who may maintain the number ranges.

You can use the authorization object N_2MEDOK to check if a user may, according to the document status, create, change, print or delete a document of this document category for the employee responsible of the documenting OU of the institution. Furthermore, the activities can be further limited for certain document statuses.

You can use authorization object C_DRAW_STA to control which user may set which document status, i.e. which next status can be set. The possible next statuses are defined within a status network for each document type. This authorization object is only used when a status is set. To see if a document with the status may be processed, you use the authorization object N_2MEDOK. Function Document for release checks if a next status exists within the status network with the release indicator, and whether this status may be set by the user.

If a document within a processing flow is to belong to one individual person, and may only be changed by that person, this can be implemented in the status network. This Owner principle for documents is implemented via the document status that have the status type, the internal status, original in work (O). In such a case, only the registered employee can change his/her documents. This status is allocated automatically each time the original is changed or created, and the next status has the status type 'O'. Here, the name of the user, the SAP user is fixed as the registered employee. The owner of the document can assign it to another user by means of the 'Change Document Management Data' function.

Individual documents can be especially protected, if the assignment is made to a user group. Only those authorization groups can be entered for the document via the 'Change Document Management Data' function, that are found in the interval of their own authorization profile. The authorization is checked using the authorization object C_DRAW_BGR. If there is no entry, no check takes place, and every user can have access. If there is no authorization for the authorization group, then the document cannot be changed, deleted, or even displayed.

When setting up the document list, no authorization check is performed, i.e. if the user has authorization for any one function of the medical documentation, then all documents that are selected, are displayed in the list. In many systems only those documents are displayed in the overview lists that the user is allowed to see or process. We will not implement this limitation, because it will not otherwise be possible to grant temporary authorization to a user to access a document (temporary treatment contract). Besides, it is fundamentally a problem if documents can be filtered out of even the overview, because if authorizations have been set up wrongly, the users concerned may never even know of the existence of certain documents.

For patients with a VIP indicator, no limitations can be put on viewing the documents, because it cannot be in the interest of such patients to possibly receive inferior treatment, just because certain hospital employees did not have all the information at their disposal.

DMS authorization objects

The list below shows which authorization objects of the SAP Document Management System (DMS) are checked in the individual application functions

(Object class Document Management).

Functions for...    Authorization object

Document    C_DRAW_TCD Document management data
create, change,     C_DRAW_BGR authorization group
delete;
Number range object
maintain in Customizing

Set status    C_DRAW_STA Document status

ISH/ISHMED authorization objects

In addition, special authorization checks are necessary in the clinical documentation (Object class Industry Solution - Hospital):

Functions for...    Authorization object

Create document    N_2MEDOK Medical documents
change, display;
print, delete;
change, display;

Accessing the    N_EINR_TCO Transactions of the DocManagement
DocManagement

Business Attributes
ASAP Roadmap ID 209   Establish Authorization Management 
Mandatory / Optional 2   Optional activity 
Critical / Non-Critical 2   Non-critical 
Country-Dependency A   Valid for all countries 
Assigned Application Components
Documentation Object Class Documentation Object Name Current line number Application Component Application Component Name
SIMG SIMG_ISHMED_OD02 0 I010004308 Parameterized Document Categories 
Maintenance Objects
Maintenance object type C   Customizing Object 
Assigned objects
Customizing Object Object Type Transaction Code Sub-object Do not Summarize Skip Subset Dialog Box Description for multiple selections
SU03 T - Individual transaction object SU03 36 Maintain authorizations for medical documentation 
History
Last changed by/on SAP  19990816 
SAP Release Created in