arrow-left

All pages
gitbookPowered by GitBook
1 of 1

Loading...

Setting Authorizations

This page guide you on how to set authorizations to users through Keycloak.

You will find below the documentation for each authorization available in MedCo. Follow this section to know how to modify those authorizations for your users.

hashtag
Authorizations

hashtag
REST API Authorizations

Those authorizations allow the user to interact with API endpoints of the MedCo connector.

circle-exclamation

The minimum set of authorizations needed for users to use MedCo is the following:

  • medco-network

hashtag
medco-network

This covers the calls related to the network metadata: list of nodes, keys, URLs, etc.

hashtag
medco-explore

This covers the calls related to the building and requesting of explore queries and cohort saving. Note that an additional authorization among the is needed to be able to make explore queries.

hashtag
medco-genomic-annotations

This covers the genomic annotations auto-completion and the querying of genomic variants.

hashtag
medco-survival-analysis

This covers the calls needed for requesting computations of survival curves.

hashtag
Explore Query Authorizations

Those authorizations set the types of result users will be able to get when making an explore query.

circle-info

Those authorizations are ordered according to their precedence. This means that if a user has several of them, the authorization with the highest level will be selected.

  1. patient_list: exact counts and list of patient identifiers from all sites

  2. count_per_site: exact counts from all sites

  3. count_per_site_obfuscated

medco-explore
  • medco-genomic-annotations

  • : obfuscated counts from all sites
  • count_per_site_shuffled: exact counts from all sites, but without knowing which count came from which site

  • count_per_site_shuffled_obfuscated: obfuscated counts from all sites, but without knowing which count came from which site

  • count_global: exact aggregated global count

  • count_global_obfuscated: obfuscated (at the site level) aggregated global count

  • explore query authorizations