Restrict Resources and Operations available and reflect restrictions in capability statement

Hi,

We're evaluating FHIR servers, got this R4 project running and working, but our use case is very specific for our initial rollout. We just want to allow for read operations on DiagnosticReport resources (maybe patient and other related resources as well). But I'm having a hard time figuring out how do we customize the R4 projects to get a paired down capability statement to reflect only allowing Http Gets on diagnostic reports?

Is this kind of customization built into the current code base? If so what is the intended way to accomplish this?

Thanks,
Chris

Start by locating the R4 project’s configuration for enabled resources and operations and the code that generates the capability statement; the issue does not name files or entry points. Determine whether read-only DiagnosticReport access and related-resource restrictions are supported, and define completion as an implemented configuration path whose capability statement reflects the allowed operations.

Written by the indexing model from the issue text.