title: How do I do authorization/access control in FHIR store?
body: <p>Is it possible to do authorization / access control in FHIR store?
  Let me show one example:</p>
  
  <p>The insurance company receive clinical information from 3 different partners, but the company need to create a different role for each one.</p>
  
  <ol>
  <li>So, the first partner can GET any patients and POST only encounter resource.</li>
  <li>Second partner can GET several patients and POST encounters and conditions resources.</li>
  <li>Third partner can GET some patients and PUT some elements in conditions resource</li>
  </ol>