Skip to content

Commit d127e36

Browse files
committed
#237: Clarified prefetch authorization conformance language.
1 parent ff3278f commit d127e36

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

docs/specification/1.0.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -224,7 +224,7 @@ An EHR MAY choose to honor some or all of the desired prefetch templates, and is
224224
- The EHR MAY compute an efficient set of prefetch templates from multiple CDS Services, thereby reducing the number of calls to a minimum
225225
- The EHR MAY satisfy some of the desired prefetched templates via some internal service or even its own FHIR server.
226226

227-
The EHR SHALL deny access if the requested resource is outside the user's authorized scope.
227+
The EHR SHALL deny access to the request resource if it is outside the user's authorized scope.
228228

229229
As part of preparing the request, an EHR processes each prefetch template it intends to satisfy by replacing the prefetch tokens in the prefetch template to construct a relative FHIR request URL. This specification is not prescriptive about how this request is actually processed. The relative URL may be appended to the base URL for the EHR's FHIR server and directly invoked, or the EHR may use internal infrastructure to satisfy the request in the same way that invoking against the FHIR server would.
230230

0 commit comments

Comments
 (0)