Projects we've engineered

accounts.service.ts

1. 1import { Router } from "express";
2. 2import { db, redact } from "./db";
3. 3
4. 4export const accounts = Router();
5. 5
6. 6accounts.get("/:id", async (req, res) => {
7. 7 const account = await db.account.find(req.params.id);
8. 8 if (!account) return res.sendStatus(404);
9. 9 // GDPR: mask personal data by default
10. 10 res.json(redact(account));
11. 11});

patients.py

1. 1from audit import log_access
2. 2from auth import require_role
3. 3
4. 4@require_role("clinician")
5. 5def get_patient(patient_id: str, user: User):
6. 6 record = PatientRecord.get(patient_id)
7. 7 log_access(user, record, reason="care")
8. 8 return record.redacted_for(user.role)