-
Type:
Story
-
Resolution: Done
-
Priority:
Medium
-
Affects Version/s: None
-
FLW Sprint 42, FLW Sprint 43, FLW Sprint 44
-
FLW Mobile App
-
All
As an ASHA Supervisor / CHO / ANM, I want to log in using my FLW app credentials so that I can securely access the incentive details only the ASHAs and sub-centres mapped to me, according to my role and assigned geography.
In FLW App, ASHA Supervisor Module is on the basis of 'Role based User access'. That is after first time user login based on the User role, i.e. as follows:
1. Role = "ASHA" then show all ASHA comprehensive modules.
i.e. Call APIs and download data related to ASHA App.
2. Role = "ASHA Supervisor" or "CHO" or "ANM"or "MO" or "MOIC" then show ASHA Supervisor module as below.
i.e. Call APIs and download data related to ASHA Supervisor module.
Functional Flow
- User Login
- User enters FLW app credentials.
- System authenticates credentials.
- Role Detection
- System identifies the logged-in user's role:
- Supervisor
- CHO
- ANM
- System identifies the logged-in user's role:
- Geography Mapping
-
- System fetches mapped:
-
-
- ASHAs
-
-
-
- Sub-centres
-
-
- Only data assigned to the user's geography is retrieved.
- Access Restriction
-
- User sees:
-
-
- Only their mapped ASHAs
-
-
-
- Only their mapped sub-centres
-
-
- No access to data outside their jurisdiction.
- API-Level Enforcement
-
- Role validation happens at backend.
-
- Every API call validates:
-
-
- User authentication
-
-
-
- Role authorization
-
-
-
- Geography mapping
-
-
- Unauthorized requests are rejected with proper error codes.
Acceptance Criteria: 1
- User logs in via FLW app credentials
- Role detected (Supervisor / CHO / ANM)
- User sees only mapped ASHAs and sub-centres
- Unauthorized users cannot access module
- Role enforced at API level
Acceptance Criteria: 2
- Role-Based Access to Applications
- Users with roles CHO, Medical Officer (MO/Doctor), Nurse, Pharmacist, Lab Technician, Registrar, or any combination of these roles, should have access to the HWC application.
- Users with the CHO role must be able to log in to both FLW and HWC applications.
- FLW App Access Control
- Users with roles ASHA, ASHA Supervisor, or ANM should have access only to the FLW application.
- In the FLW app:
- Users with roles CHO, ASHA Supervisor, or ANM should have access only to Supervisor modules, and must not access ASHA comprehensive modules.
- Users with the ASHA role should have access to all ASHA comprehensive modules, but not to Supervisor modules.