Security Filtering

Harvest Webstation users are allowed access to orders and patients based on their Web Personnel Group, Web Location Group, and the Web Preference settings (set in Harvest) for ordering patient samples, looking up patient results, and listing completed orders and orders in progress. See Configuring Harvest Webstation: Modifying Program Preferences or Configuring Harvest Webstation: Establishing Security Settings for more information on establishing these settings.

1. Ordering Patient Samples in Harvest Webstation

When ordering patient samples in Harvest Webstation, you enter a patient's full or partial name, which causes Harvest Webstation to search for all patients with matching names. The search results are affected by the Harvest Webstation preferences and filters set up in Harvest. See Security Filtering Preferences.

• If the Preference to restrict based on location is set for ordering patient samples, Harvest Webstation will only find matches on patients with locations in your security group.
• If the Preference to restrict based on personnel is set for ordering patient samples, Harvest Webstation will only find matches on patients with personnel in your Web security group.
• If both Preference settings are set, Harvest Webstation will only find patients who meet both requirements.

Note that if a patient does not have a primary provider set, they will not be included when Web Personnel Groups are in use, and if a patient does not have a location set, they will not be included when Web Location Groups are in use. You may add or change a patient's linked provider in Harvest Webstation; however, you may only link a location to a patient in Harvest Webstation when you initially create the patient's record during order entry. You will only be able to edit existing location values in Harvest.

2. Looking up Patient Results in Harvest Webstation

When looking up individual patient results or orders in Harvest Webstation, you may search by patient name or sample ID. The search results are affected by the Harvest Webstation preferences and filters set up in Harvest. See Security Filtering Preferences.

• If any of the Preferences to restrict based on location (patient, draw, or order) are set for looking up patient results, Harvest Webstation will only find matches on patients or orders with locations in your security group.
• If the Preference to restrict based on provider is set for looking up patient results, Harvest Webstation will only find matches on patients or orders with providers in your security group.
• If both Preference settings are set, Harvest Webstation will only find patients who meet both requirements.

The default security behavior when looking up results is to restrict access to orders or patients based on the patient's assigned provider. However, you may modify the preference settings to have the security behavior look at the ordering provider rather than the patient's assigned provider when determining whether or not the Harvest Webstation user may access patient or order records. Based on this setting, Harvest Webstation classifies patient and order records as accessible or inaccessible.

• If you are restricting based on the patient's assigned provider, the Web Personnel Group settings are only respected if the patient has been assigned a provider. If the patient does not have an assigned provider, then all Harvest Webstation users will be allowed to see that patient's records.
• If you are restricting based on the ordering provider, the Web Personnel Group settings are respected, and Harvest Webstation users will only be allowed to view patient records where the ordering provider is in their assigned web personnel group. If the patient does not have an assigned provider because the patient does not have any orders, regardless of the filtering option, unless you use the advanced configuration option to hide patients with no orders when filtering by ordering provider, then all Harvest Webstation users will be allowed to see that patient's records.

You may also establish a preference setting to hide inaccessible patients or orders when looking up patient results or orders. If you do not hide inaccessible patients or orders, then you will be able to access the Security Reasons page, which displays your current settings and an explanation of why the order is inaccessible. See "Reviewing Security Settings for Inaccessible Orders" below.

3. Listing Completed Orders and Orders in Progress

You may establish preference settings to control what completed orders and orders in progress Harvest Webstation users may view. The list of orders are affected by the Harvest Webstation preferences and filters set up in Harvest. See Security Filtering Preferences.

• If the "Show orders for providers in personnel group" preference is enabled, then Harvest Webstation users will be able to see orders for either patients' assigned providers or ordering providers who belong to their web personnel group.
• If the "Show orders for providers in personnel group" preference is not enabled, then Harvest Webstation users will only be able to see orders on which they are the ordering provider/entering technologist.
• If the "Show orders for Draw Locations in loc group" preference is enabled, then Harvest Webstation users will be able to see orders with draw locations in their web location group.
• If the "Show orders for Draw Locations in loc group" preference is not enabled, then Harvest Webstation users will only be able to see orders on which they are the ordering provider/entering technologist.
• If the "Show orders for Order Locations in loc group" preference is enabled, then Harvest Webstation users will be able to see orders with order locations in their web location group.
• If the "Show orders for Order Locations in loc group" preference is not enabled, then Harvest Webstation users will only be able to see orders on which they are the ordering provider/entering technologist.

See the Harvest online help for more information on configuring security settings.

Reviewing Security Settings for Inaccessible Orders

1. Once you have set the security filters in Harvest, Harvest Webstation applies them to users’ actions.
2. When looking up results or orders in Harvest Webstation via the Find Patient or Find Sample ID options and Harvest Webstation is configured to show inaccessible results, sample IDs for inaccessible orders are displayed as regular text instead of as a hyperlink on the Edit Patient: Orders Tab and on the Sample ID Search Results pages. These inaccessible orders are followed by a small "??" hyperlink.
3. Click the ?? link to display the Security Reasons page, entitled "You Do Not Have Access to These Results." This page displays your current settings and an explanation of why the order is inaccessible. See Security Reasons for more information.
4. If you believe that you should have access to the inaccessible result or order, you should contact a Harvest System Administrator.