Review (in produciton) patient and doctor relationships to ensure that no doctors can see a patient's post

[bmamlin]

I added a query to our SPHERE queries document:

SELECT
  (SELECT username FROM users u WHERE u.person_id=r.person_id)
FROM patientportal_relation r
WHERE
  relationship_type = 1; 

and ran this on production. The list of usernames who have a relationship to a Doctor are all internal/test usernames:

dennaaba
dona
john
patient
patient3
patientmicah
samplepatient
testpatientmaurya
testpatientmitch

none of which are SPHERE production patient usernames, confirming that no patients on production have created relationships to doctors.