add protect user for patient