craig mcclendon

AuthorizationInteceptor deny() rule being mis-applied.

1

I'm running against a pretty recent fork of HAPI JPA server based on HAPI 6.0.1. I'm trying to construct an AuthorizationInterceptor rule such as: ``` new RuleBuilder() .deny().read().resourcesOfType("Group").withAnyId().andThen() .allow().read().allResources().inCompartment("Patient", resourceId)...

**Environment (please complete the following information):** - HAPI FHIR Version - 7.0.0-SNAPSHOT Two semi-related issues: 1) ca.uhn.fhir.rest.server.interceptor.auth.IAuthRuleBuilderRule contains read(), write(), and create() methods to allow/deny these operations. The write() function...

hapi-fhir-storage-cr has dependency on old/incompatible spring-security-core version

1

_hapi-fhir-storage-cr_ has a hardcoded dependency on an older spring-security-core version (5.7.8) - which is not compatible with the springboot version of the overall project. Offending line: https://github.com/hapifhir/hapi-fhir/blob/master/hapi-fhir-storage-cr/pom.xml#L22 Since _hapi-fhir-storage-cr_ is...

remove requirement to have 'missing' idxs enabled for patient bulk export

2

TBH, I'm not clear why missing indexes were required for patient bulk export in the first place. So I'm not certain if this PR is "safe". But submitting for review...

Add a property to enable the UserRequestRetryVersionConflictsInterceptor interceptor: https://hapifhir.io/hapi-fhir/docs/server_jpa/configuration.html#retry-on-version-conflict