Structured business rules for authorisation.
Convenience function for authorisation checks in BaseController.
Remove obsolete methods.
Patient controller updates.