Adding permisions. Students or users can't add patients/records