Should doctors and or patients have read only API access to the emr?

Should doctors and or patients have read only api access to their patients records or their own records in the electronic medical record ? If yes, how do I convince the medical informatics community ?