Extended FHIR Server User Role Config - Role Per Resource

[hhund]

The FHIR Server Role Config should be extended to allow configuration of roles per FHIR resource. In the following example a User with the given thumbprint (shortened) would be allowed to create Task resources, read all resource, update QuestionnaireResponse and perform search and history operations for all resources.

- first-example:
   thumbprint: 0558ea1fed1ef1e5d350 ... 9648b1cb98c3e424a882
   dsf-role:
     - CREATE: [Task]
     - READ
     - UPDATE: [QuestionnaireResponse]
     - SEARCH
     - HISTORY

Second example: User is allowed to read Organization, OrganizationAffiliation and Endpoint resources. User is also allowed to perform searches, but only Organization, OrganizationAffiliation and Endpoint resources will be returned, all other search results will be empty.

- second-example:
   thumbprint: 0558ea1fed1ef1e5d350 ... 9648b1cb98c3e424a882
   dsf-role:
     - READ:
       - Organization
       - OrganizationAffiliation
       - Endpoint
     - SEARCH

Operations SEARCH, HISTORY and WEBSOCKET should only include results if the the users also has the READ role for the specific resources.