Medico-legal problem

  • Thread starter Thread starter DubboPete
  • Start date Start date
D

DubboPete

Hello all again!

I have a database which is under construction, and it has to be assessed and
certified by our medico-legal people.

One requirement is that any clinical notes entered into a particular memo
field in a table table CANNOT and I stress CANNOT be deleted, removed,
altered and so on.

This is a legal requirement.

How do I achieve this?
I realise that this may be complex, but I would appreciate any help.
Yes, the database is secure, with user logins and passwords, usergroups,
etc...

TIA

DubboPete
 
You can accomplish this, but Microsoft Access is not that secure an
environment.

If you want to accomplish this, you would need to release the file in an MDE
format first of all. Secondly, you would have to take away access to all
the tables and queries from all the users.

If table and query access is not granted, the users would be forced to do
everything through forms based on queries. Since they don't have access to
the queries, you would have to run them using the 'owner's permissions.

After you do all this, you would need to code the form in such a way that
the notes field allows entry, but is locked when reviewing any records.

Again, MS Access is most likely not the environment to use if you truly need
to assure your legal team that changes can't be made. Most savvy users
could get around many of the features above.

Rick B

Hello all again!

I have a database which is under construction, and it has to be assessed and
certified by our medico-legal people.

One requirement is that any clinical notes entered into a particular memo
field in a table table CANNOT and I stress CANNOT be deleted, removed,
altered and so on.

This is a legal requirement.

How do I achieve this?
I realise that this may be complex, but I would appreciate any help.
Yes, the database is secure, with user logins and passwords, usergroups,
etc...

TIA

DubboPete
 
I would do everything that Rick suggests, but I would also keep and
save a hash of the contents of the field, using a secret key, in
another field in the table when it is first created. you can then
"rehash" the memo field's contents every time they are used to make
sure they haven't been changed. This adds very significant further
difficulties for someone who tries to make an unauthorised change, and
I suspect that your lawyers will like it.

Hello all again!

I have a database which is under construction, and it has to be assessed and
certified by our medico-legal people.

One requirement is that any clinical notes entered into a particular memo
field in a table table CANNOT and I stress CANNOT be deleted, removed,
altered and so on.

This is a legal requirement.

How do I achieve this?
I realise that this may be complex, but I would appreciate any help.
Yes, the database is secure, with user logins and passwords, usergroups,
etc...

TIA

DubboPete
Click to expand...

Please respond to the Newsgroup, so that others may benefit from the exchange.
Peter R. Fletcher
 
Back
Top