The outside lab sends a PDF to the complex inbox. Anyone can open the inbox, because the password is one password. The result belongs to the morning internal-medicine visit. The dermatologist opens it while looking for his own. He reads the wrong name, or the right name, and calls a patient who is not his. The mess is not the lab. The mess is that the result has no visit.
The result returns to the visit the sample left from
If the sample was requested from a visit, it comes back to that visit, and the person who may see that visit is the person who sees it. A shared inbox is not a permission. A shared inbox is a box with no name.
Elite Care keeps the operational request tied to the visit even when the work happens outside. Whoever receives the file attaches it to the visit, not to the desktop. The doctor concerned sees it in place. Everyone else does not get it in a “new” list just because they have the mailbox.
If the result is late, the lateness shows on the visit: requested, not back. Reception can answer the patient from the state, without opening the content of the result if they are not allowed to.