Fix accept_patient_reports so it calls db for readonly actions instead of audit