Who on your team sees what — role by role, permission by permission
Law 172-13 treats health data as sensitive: reception and billing must not touch the clinical record. In Sonrisario that's not a handbook recommendation — it's how the product is built. Here is the full matrix.
Why least privilege matters in a dental practice
Two kinds of information live in a practice: operational (appointments, payments, estimates) and clinical (diagnoses, dental chart, history). The whole team needs the first; only those who treat need the second. A system that doesn't distinguish turns every hire into a legal risk.
Sonrisario gives each role exactly what its job requires. The receptionist schedules, receives and charges — and never opens a clinical record, not even by mistake, because the barrier isn't an on-screen warning: the server checks the permission before every operation and the database re-checks it independently, row by row.
On top of that, roles with clinical access require a second factor: a doctor's leaked password isn't enough to open their patients' records.
The full matrix, generated from the real code
Schedules, greets and takes payments at the desk. Never opens the clinical record.
Can do
- See the patient list
- Register and edit patients
- See estimates and payments
- Record payments at the desk
Cannot, not even by mistake
- Read the clinical record and the dental chartHealth data
- Write to the clinical record and the dental chartHealth data
- Issue receipts, invoice and finance in installments
- Propose estimates
- Configure the practice and the fiscal sequence
- Add and suspend staff
- See practice analytics
- See payment and estimate reports
- Read the audit log
This table isn't marketing material: it's generated from the same file the server checks before every operation, and the database double-checks it on its own with row-level policies. Two independent barriers, not a settings checkbox.
Invite your team with the limits already in place
Doctors, assistants, reception and billing — each with their exact reach.