Limit access to non-PII data in patient and subject records

By default, any application user is permitted to access non-PII records for all patients and subjects. If required, the row-level filtering mode can be turned on at the system level, which limits user access to only a subset of patients or subjects. If this optional mode is turned on, only users explicitly assigned to a data access policy are granted access to the patients or subjects associated with the policy. A user can be assigned to any number of policies.

  1. On the database server, log in to SQL*Plus as CDM.
  2. Run stored procedure VPD_UTIL.ENABLE_ROW_FILTER_POLICIES:
    • To require that users must be assigned to a data access policy to see any subject or patient data for a particular study or patient group, enter a value of 1:
      exec vpd_util.enable_row_filter_policies(1)
      
    • To enable all users to see non-PII data for any subject or patient, enter a value of 0. This is the default value.
      exec vpd_util.enable_row_filter_policies(0)