Card #262 Security: Disease Group Admins - added DISEASE_GROUP_ADMIN and appropriate permissions in ui and elsewhere, including SQL, same as STAFF_ADMIN,
only show filters on staff and patients if they have content