in src/smartAuthorizationHelper.ts [129:145]
export function hasAccessToResource(
fhirUserObject: FhirResource,
patientLaunchContext: FhirResource,
sourceResource: any,
usableScopes: string[],
adminAccessTypes: string[],
apiUrl: string,
fhirVersion: FhirVersion,
): boolean {
return (
hasSystemAccess(usableScopes, sourceResource.resourceType) ||
(fhirUserObject &&
(isFhirUserAdmin(fhirUserObject, adminAccessTypes, apiUrl) ||
hasReferenceToResource(fhirUserObject, sourceResource, apiUrl, fhirVersion))) ||
(patientLaunchContext && hasReferenceToResource(patientLaunchContext, sourceResource, apiUrl, fhirVersion))
);
}