- Shipped
- August 27, 2026 at 4:15 AM UTC
- Author
- Kamo
- Commit
- ac683c1
Withdrawing portal access and granting a proxy both take an account id, and no endpoint ever returned one. A practice could invite a patient to the portal and then had no way to see whether they had access, let alone take it away. Granting a standing login to a medical record with no route to revoking it is the wrong half of a feature. GET **************** gated on MANAGE_PATIENT_PORTAL like everything else in the module. It returns a list because the login IS an e-mail address: a patient who changed address has two accounts, and the old one still opens their record until somebody disables it — precisely what the screen is for. Three states rather than an active flag. "Invited, never set a password", "set up, not signed in yet" and "in use" are acted on differently, and the first is the one worth a phone call — an active/inactive boolean hides it inside "not active".