Where it usually breaks
And how to keep it from happening.
- The image is submitted for the wrong encounter. Resolve its linked patient and clinician before saving.
- A consent label is treated as authorization. Check the relevant patient consent and current professional authority.
- A restricted image can be retrieved through a direct link by an operational user. Test the file path as well as the screen.