even though a patient has the right to request an amendment to their file, an organization also has the right to accept or deny the proposed change?