Update api/routes/patients.py

api/routes/patients.py

@@ -123,7 +123,7 @@ async def delete_patient(
     """Delete a patient from the database"""
     logger.info(f"Deleting patient {patient_id} by user {current_user.get('email')}")
     
-    if current_user.get('role') not in ['admin']:
+    if current_user.get('role') not in ['admin', 'doctor']:
         logger.warning(f"Unauthorized delete attempt by {current_user.get('email')}")
         raise HTTPException(
             status_code=status.HTTP_403_FORBIDDEN,