<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from rtf -->
<style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left: #800000 2px solid; } --></style>
</head>
<body>
<font face="Cambria" size="4"><span style="font-size:14pt;">
<div>This document was presented quickly during the last few minutes of our call and I am not sure what the objective was. However, it did raise some questions that could not be addressed at the time, specifically paragraph 2.1 “Permission type” raised some
questions which I broke out below: </div>
<ol style="margin:0;padding-left:54pt;">
<li>The term “Patient” and “User” seem misleading and the purpose is not clear.</li></ol>
<ol type="a" style="margin:0;padding-left:90pt;">
<li>A patient can have access to multiple patient records. For example, a parent who has five children at the same pediatrician would be a patient that can access multiple patient records. </li><li>It also sounds like we are hardcoding two specific security roles, which would seem to contradict what we are trying to support in HEART (i.e. RBAC vs ABAC). </li><li>There can be resource that are not related to specific patient or patients in general such as “Organization”, “HealthcareService”, “Practitioner”, etc.</li></ol>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<div>Bill</div>
<div> </div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<table width="747" style="width:448.2pt;">
<col width="378" style="width:226.8pt;">
<col width="369" style="width:221.4pt;">
<tr>
<td><font face="Times New Roman" size="3"><span style="font-size:12pt;"> </span></font></td>
<td><font face="Times New Roman" size="3"><span style="font-size:12pt;"><img width="145" height="40" src="http://bridge.nextgen.com/Media/3140"></span></font></td>
</tr>
</table>
<table width="747" style="width:448.2pt;">
<col width="747" style="width:448.2pt;">
<tr>
<td><font face="Times New Roman" size="3"><span style="font-size:12pt;"><u> ________________________________ </u>
<div> </div>
</span></font></td>
</tr>
</table>
<table width="747" style="width:448.2pt;">
<col width="538" style="width:322.8pt;">
<col width="209" style="width:125.4pt;">
<tr>
<td><font face="Calibri" size="2"><span style="font-size:10pt;">William Kinsley , CISSP<br>
Enterprise Architect, Ambulatory<br>
<b>NEXTGEN HEALTHCARE<br>
</b>Solutions for: Ambulatory, Inpatient and Community Connectivity<br>
795 Horsham Road, Horsham, PA 19044<br>
(215) 657-7010 x21128 <br>
BKinsley@nextgen.com</span></font></td>
<td><font face="Times New Roman" size="3"><span style="font-size:12pt;"><a href="http://www.oneugm.com"><img src="http://bridge.nextgen.com/Media/3181"></a></span></font></td>
</tr>
</table>
<div><font face="Times New Roman" size="3"><span style="font-size:12pt;"><br>
</span></font></div>
<table width="747" style="width:448.2pt;">
<col width="747" style="width:448.2pt;">
<tr>
<td><font face="Calibri" size="2" color="#E46C0A"><span style="font-size:10pt;">Be ready for MU and ICD-10 in 2015. Start your EHR version 5.8 and KBM version 8.3 upgrade today. Get the resources you need at <a href="http://www.nextgen.com/upgradecentral"><font color="#007CB9"><b><i><u>www.nextgen.com/upgradecentral</u></i></b></font></a></span></font></td>
</tr>
</table>
<div><font face="Times New Roman" size="3"><span style="font-size:12pt;"><br>
</span></font></div>
<table width="747" style="width:448.2pt;">
<tr>
<td><font face="Arial" size="1"><span style="font-size:7.5pt;">This message, and any documents attached hereto, may contain confidential or proprietary information intended only for the use of the addressee(s) named above or may contain information that is
legally privileged. If you are not the intended addressee, or the person responsible for delivering it to the intended addressee, you are hereby notified that reading, disseminating, distributing or copying this message is strictly prohibited. If you have received
this message by mistake, please immediately notify us by replying to the message and delete the original message and any copies immediately thereafter. Thank you for your cooperation.</span></font></td>
</tr>
</table>
</span></font>
</body>
</html>