[Implement RBAC]: Role Based Access Control on FHIR web

[ageryck]

Feature Use Case

Implement RBAC to allow users of the fhir web to only access and modify data based on assigned roles in keycloak.
CRUD operations roles are to be considered two resources consumed by fhir web, same backend implementation used by fhircore client applications can be used since we target to use the same gateway & keycloak deployment. The implementation should however be generic for users intending to deploy web with other IAM systems.

• web to read available roles in keycloak and allow UI access configuration based on the roles #1410
• web to generically control access/views to web pages based on permission #1411
• web to generically control UI CRUD action buttons of individual resources based on applied permission of the logged in user #1412

Acceptance criteria

• web users assigned exclusive roles in keycloak
• web users access filtered data based on assigned roles
• web UI controlled by user roles

Project Contact

Ager

Relevant Information

RBAC has been scoped on this and this discussions. More web-specific scope to be provided

[dubdabasoduba]

Same as #1182

[pld]

closing in favor of #1182 which has more details