hasPatientVisibility returns true for a superadmin whatever org the patient is in, and says
the entity check belongs to the caller — so without this a session scoped to one org would
stamp its evaluations against another org's patient. Written once because two procedures need
the same answer and a check a caller can forget is a check that gets forgotten.
The org a rulebook read or write is scoped to.
hasPatientVisibilityreturns true for a superadmin whatever org the patient is in, and says the entity check belongs to the caller — so without this a session scoped to one org would stamp its evaluations against another org's patient. Written once because two procedures need the same answer and a check a caller can forget is a check that gets forgotten.