medplum / medplum / 30314425192 / 1

92%

main: 92%

push

github

Document default access policies and admin reconciliation (#9992)

* Document default access policies and admin reconciliation

Add a "Default Access Policies" section to the access policies docs
covering the per-profile-type defaults on Project.defaultAccessPolicies,
the automatic access-policy reconciliation when the admin flag is toggled,
and the recommendation to override the default at invite time for custom
access combinations.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Signed-off-by: maddyli <maddy@medplum.com>

* Clarify that admin reconciliation only swaps the opposite role default

The swap only fires when the current policy is exactly the opposite
role's recognized default (Practitioner when promoting, Admin when
demoting). Any other policy, including custom ones, is left untouched.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Signed-off-by: maddyli <maddy@medplum.com>

---------

Signed-off-by: maddyli <maddy@medplum.com>
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>

22610 of 25686 branches covered (88.02%)

Branch coverage included in aggregate %.

40130 of 42524 relevant lines covered (94.37%)

12265.02 hits per line