Information Systems:Pharmacist license validation issue

Overview

It's about time a wiki page was started for this issue.

In August 2016, it was discovered that there were a lot of narcotics orders being processed with an invalid or completely missing pharmacist license number. Querying order history files showed various patterns regarding pharmacist license number transmission, and it was quickly realized that this problem was multi-faceted and quite large in scope. This page attempts to log everything we know about this issue.

The discussion here is meant to be technical; if a more generic page becomes warranted, we'll cross that bridge... -norwizzle (talk))

Technical notes

Known facts

General

• The system (i.e. CNS,IOP) was designed to validate pharmacist numbers against the store number (customer number) only. CNS does have records linking individual users to their pharmacist license numbers, but the line-level checking in IOP and Web Orders checks against customer number only.
• Exempted codeine products brought this issue to light. This is a class of drugs that, by Health Canada regulations, requires the wholesaler to sell to pharmacies as if it were a narcotic, but allows the pharmacies to sell to the general public as an OTC/BTC product. This two-faced regulation is one of the main reasons this issue came to light and is also the cause of difficulties in the logistical processing/management of these products.

Kroll

• Orders for C/T (controlled/targeted) drugs are not transmitted with the pharmacist license number in Kroll.

It was discovered that Kroll was actually made aware of this in late 2014 and decided to take it out of their code due to massive customer complaints.

Kroll is making an update to reverse this change, it will be implemented in V10 SP9.

Web Orders

• Comments in the code suggest that attempts to checkout a web order containing a narcotic but without a pharmacist license number should throw an alert but can be bypassed and eventually processed. However, this was never implemented. Thus Web Orders does not allow placing an order with an invalid or missing pharmacist number.

• Web Orders stores the pharmacist license number along with the user account information in its own table (WSUSERP), separate from CNS. That is, there is a pharmacist number field in the users table.

• For an order containing a narcotic, Web Orders will use the pharmacist number in the users table. If one is not present, it will use the one entered on the cart page prior to final checkout/order submission. If one is not entered, an error is thrown.