Consent Service Considerations - hapifhir/hapi-fhir GitHub Wiki

This page will almost certainly get migrated somewhere more permanent eventually.

Considerations for building a consent service that applies directives but doesn't leak information:

• Handle chained search parameters somehow (block them? allow interceptor to have a say on them?)
• Block/filter Bundle.total and avoid returning search bundles that are obviously missing entries