Advisory: HealthShare Care Community Tasks can be Assigned to Members of a Care Team who do not have Permission to View or Take Action on them

In HealthShare Care Community 2021.1 and 2021.2, tasks can be assigned to users who can neither see them nor take action on them.

The Task feature allows a user to create and assign a task to anyone on a care team. This sets up a dynamic where three different potential issues are present:

1. Someone without login access to HealthShare can be assigned a task.
2. Someone without access to Care Community can be assigned a task.
3. Someone who does have access to Care Community but who may not have consent to view a patient, could see that patient listed on their "My Tasks" page.

This issue is documented as a known limitation in the HealthShare Care Community Release Notes.

The correction for this defect will be included in future product releases with the release of feature enhancements.