Data Sharing

​

Overview

​

How Data Sharing Works

​

Sharing Model

• Owner: You (the person creating health records)
• Viewers: People you grant access to (family, doctors, caregivers)
• Permissions: Viewers have read-only access to all your health data
• Scope: When you share, viewers see your complete health history

​

What Gets Shared

​

Granting Access

​

Adding a Viewer

1. Navigate to Profile Settings: Access your account settings
2. Find Data Sharing Section: Locate the “Share Data” or “Compartir Datos” section
3. Search for User: Type the username of the person you want to grant access to
4. Select from Results: Click on the correct user from the search results
5. Confirm: Add the viewer to your authorized list

​

Search Functionality

public function updatedSearch()
{
    if (strlen($this->search) < 2) {
        $this->searchResults = [];
        return;
    }

    $this->searchResults = User::where('id', '!=', auth()->id())
        ->where('username', 'like', '%' . $this->search . '%')
        ->take(5)
        ->get();
}

• Activates after typing 2 characters
• Shows up to 5 matching usernames
• Excludes yourself from results
• Clears automatically when you select a user

​

Validation and Safeguards

1. User Must Exist:
   'username' => 'required|exists:users,username'
   
   Error: “No encontramos ningún usuario con ese Nick.”
2. Cannot Share with Yourself:
   if ($viewer->id === auth()->id()) {
       throw ValidationException::withMessages([
           'username' => 'No puedes compartirte datos a ti mismo.'
       ]);
   }
   
3. No Duplicate Access:
   if (auth()->user()->allowedViewers()
       ->where('viewer_id', $viewer->id)->exists()) {
       throw ValidationException::withMessages([
           'username' => 'Este usuario ya tiene acceso a tus datos.'
       ]);
   }
   

​

Managing Viewers

​

Viewing Your Authorized List

return view('livewire.profile.share-data', [
    'viewers' => auth()->user()->allowedViewers
]);

• Complete list of users with access to your data
• Usernames or display names
• Option to remove access for each viewer

​

Revoking Access

public function removeViewer($id)
{
    auth()->user()->allowedViewers()->detach($id);
}

1. Click Remove: Select the remove button next to the viewer’s name
2. Instant Revocation: Access is removed immediately
3. No Confirmation Needed: The viewer can no longer see your data
4. Seamless Process: The viewer is not notified of the revocation

​

Viewer Experience

​

Accessing Shared Data

1. You can view their calendar from your account
2. All their health activities are visible
3. You see the same calendar interface they see
4. Full historical data is available

​

Viewer Mode Indicators

$isReadOnly = session('viewing_user_id') 
    && session('viewing_user_id') != auth()->id();

• Blue banner at the top: “Modo Espectador” (Viewer Mode)
• Message: “Estás viendo los datos de otro usuario. No puedes crear ni editar registros.”
• FAB (Floating Action Button) is hidden
• No edit or delete buttons on entries

​

What Viewers Can Do

• View complete calendar with all activities
• Navigate between months
• Click days to see detailed entries
• Download appointment attachments
• See weight trends and statistics
• Review blood pressure history
• View upcoming and past appointments

• Cannot create new entries
• Cannot edit existing data
• Cannot delete records
• Cannot upload files
• Cannot modify appointments

​

Data Sharing Relationships

​

Database Structure

// User model
public function allowedViewers()
{
    return $this->belongsToMany(User::class, 
        'user_viewer',
        'user_id',
        'viewer_id'
    );
}

• user_id - The person sharing their data
• viewer_id - The person who can view the data
• Supports many-to-many relationships
• You can have multiple viewers
• You can view multiple people’s data

​

Session Management

$userId = session('viewing_user_id', auth()->id());

• Session stores whose data you’re currently viewing
• Defaults to your own user ID
• All queries filter by this context-aware user ID
• Ensures data isolation and security

​

Use Cases

​

Privacy and Security

​

Data Protection

​

Security Measures

1. Authentication Required: Both parties must have Health Manager accounts
2. Query Filtering: All data queries respect the user context
   $userId = $this->getTargetUserId();
   MeasurementWeight::where('user_id', $userId)->get();
   
3. Write Protection: Viewers cannot modify data at the controller level
4. Session Isolation: Each session tracks the current viewing context
5. No Cross-Contamination: Impossible to accidentally write to another user’s records

​

Best Practices

​

Technical Implementation

​

ShareData Livewire Component

public $username = '';      // Selected username to add
public $search = '';        // Search query
public $searchResults = []; // Dynamic search results

• updatedSearch() - Reactive search triggered on input
• selectUser($username) - Handles user selection from results
• addViewer() - Validates and grants access
• removeViewer($id) - Revokes access
• render() - Displays viewers list

​

Context-Aware Queries

use HasContext;

$userId = $this->getTargetUserId();
// Returns viewing_user_id from session or auth()->id()

• Calendar
• Weight history
• Blood pressure logs
• Appointment lists

​

Troubleshooting

​

Common Issues

• The username doesn’t exist in the system
• Check for typos in the username
• Ensure the person has created a Health Manager account

• You’ve already granted access to this person
• Check your authorized viewers list
• No need to add them again

• Verify the viewer is in your authorized list
• Ensure they’re looking at your shared data (not their own)
• Check that they’re using the correct account

​

Related Features

• Interactive Calendar - Main interface viewers use to see shared data
• Health Tracking - Metrics that can be shared with viewers
• Medical Appointments - Appointments visible to authorized viewers