Marc-André Bombeck 5d6bc73cdc test(encounters): guard the batched link redaction on the visit list ...

The per-family withholding of a link's label and date from a scoped delegate
was proven on the detail read and not on the list read. The two resolve links
through different functions — the list through the batched loadEncounterLinksForMany,
added when links moved onto the list — and a batched read that dropped the
redaction would leak a lab analyte and its date to a delegate the single read
withholds them from, with no assertion on the detail path to notice.

Three legs, mirroring the detail coverage against the list route: an
entire-record delegate sees every name, a profile-only delegate sees the shape
of all three links and the name of none, and a profile-plus-labs delegate sees
the lab name and neither of the other two. The entire-record leg is the control
that stops the redaction assertion passing against a read that redacts
unconditionally.

2026-08-08 15:54:19 +02:00

..

fixtures/v137

Add the visit and address-book API, and the appointment arm

2026-08-08 07:51:29 +02:00

integration

test(encounters): guard the batched link redaction on the visit list

2026-08-08 15:54:19 +02:00