Scenario: ExampleHMO using row and column access control - Data insertion

When a new patient is admitted for treatment in the hospital, the new patient record must be added to the ExampleHMO database.

Bob is a new patient, and his records must be added to the ExampleHMO database. A user with the required security authority must create the new record for Bob. Tom, from the ExampleHMO membership department, with the MEMBERSHIP role, enrolls Bob as a new member. After connecting to the ExampleHMO database, Tom runs the following SQL statements to add Bob to the ExampleHMO database:

INSERT INTO PATIENT
  VALUES('123-45-6789', 'BOB', 'Bob', '123 Some St.', 'hypertension', 9.00,'LEE');
INSERT INTO PATIENTCHOICE
  VALUES('123-45-6789', 'drug-research', 'opt-in');

Tom confirmed that Bob was added to the database by querying the same from the PATIENT table in the ExampleHMO database:


Select * FROM PATIENT WHERE NAME = 'Bob';

SSN         USERID    NAME    ADDRESS       PHARMACY     ACCT_BALANCE  PCP_ID

----------- --------- ------- ------------- ------------ ------------- ------
123-45-6789 BOB       Bob     123 Some St.  XXXXXXXXXXX  0.00          LEE