Complete: Enable Admin changes of worker TimeSheets. Locked down user
timesheets.  TODO: fix report hours.