A method, comprising: receiving, at a server system , a request specifying one of a plurality of predefined actions and a logical resource identifier; determining a logical resource uniquely identified by the logical resource identifier; determining user information corresponding to a requestor from which the RESTful API request was received; determining a security policy to apply to the request, based on the determined user information and the logical resource; enforcing role level security for the request, based on role(s) assigned to the determined user information, particular logical resources may only be accessed by users assigned to certain roles, one role being a physician, and care plans and devices of a patient are configured as different logical resources, and different logical resources can only be accessed by users assigned certain roles, processing the received request according to the determined security policy; processing the received request according to the determined security policy further comprises performing one or more operations corresponding to the action specified in the request, for the determined logical resource corresponding to the logical resource identifier; and performing one or more operations corresponding to the action specified in the request, for the determined logical resource corresponding to the logical resource identifier, further comprises: generating a Structured Query Language (SQL) query based on the action specified in the RESTful API request and the determined logical resource; executing the generated SQL query to produce a set of query results; and returning the query results to the requestor from which the request was received. receiving, at a server system , a request specifying one of a plurality of predefined actions and a logical resource identifier; determining a logical resource uniquely identified by the logical resource identifier; determining user information corresponding to a requestor from which the RESTful API request was received; determining a security policy to apply to the request, based on the determined user information and the logical resource; enforcing role level security for the request, based on role(s) assigned to the determined user information, particular logical resources may only be accessed by users assigned to certain roles, one role being a physician, and care plans and devices of a patient are configured as different logical resources, and different logical resources can only be accessed by users assigned certain roles, processing the received request according to the determined security policy; processing the received request according to the determined security policy further comprises performing one or more operations corresponding to the action specified in the request, for the determined logical resource corresponding to the logical resource identifier; and performing one or more operations corresponding to the action specified in the request, for the determined logical resource corresponding to the logical resource identifier, further comprises: generating a Structured Query Language (SQL) query based on the action specified in the RESTful API request and the determined logical resource; executing the generated SQL query to produce a set of query results; and returning the query results to the requestor from which the request was received. generating a Structured Query Language (SQL) query based on the action specified in the RESTful API request and the determined logical resource; executing the generated SQL query to produce a set of query results; and returning the query results to the requestor from which the request was received. <EOS>