Block users from accessing their own medical record

As a secure measure. I don't think staff should be able to access their own record. Even if there is a policy that forbids we should have a way to reinforcement it.