MedRecord – Secure Medical Records with Fine-Grained Access Control

This is a submission for the Permit.io Authorization Challenge: Permissions Redefined What We Built MedRecord is a modern, privacy-first medical records management system that empowers doctors and patients with secure access to health data while giving administrators full oversight. We tackled the problem of data access control in healthcare — ensuring that only authorised users can read, update, or manage sensitive medical records. With Permit.io, we implemented Attribute-Based Access Control (ABAC) and Role-Based Access Control (RBAC), allowing Admins to manage the entire system Doctors can view all records but update only their assigned patients Patients to view only their personal records By decoupling permissions logic from our codebase, we built a scalable and maintainable system that’s easy to audit and extend. Demo

May 4, 2025 - 22:13
 0
MedRecord – Secure Medical Records with Fine-Grained Access Control

This is a submission for the Permit.io Authorization Challenge: Permissions Redefined

What We Built

MedRecord is a modern, privacy-first medical records management system that empowers doctors and patients with secure access to health data while giving administrators full oversight. We tackled the problem of data access control in healthcare — ensuring that only authorised users can read, update, or manage sensitive medical records.

With Permit.io, we implemented Attribute-Based Access Control (ABAC) and Role-Based Access Control (RBAC), allowing

  • Admins to manage the entire system
  • Doctors can view all records but update only their assigned patients
  • Patients to view only their personal records

By decoupling permissions logic from our codebase, we built a scalable and maintainable system that’s easy to audit and extend.

Demo