A hospital uses a case type to manage the treatment of patients visiting the Emergency Room (ER). Cases are
created when the patient checks in at the registration desk, and are resolved when the patient is released from
the hospital. Stakeholders identify the following security requirements for the case type.
Patients access cases on a read-only basis.
Patients can only access their own cases.
Doctors and nurses can modify cases throughout the case life cycle.
Only doctors are allowed to write prescriptions.
What two steps, when performed together, allow you to ensure that patients can read, but not edit, cases?
(Choose Two)