Implement Security Module

[lamorie]

patient can only view his/her own records;
a doctor can only view records of their patients;
a radiologist can only review records conducted by oneself;
and an administrator can view any records.