fix permissions

make timetracker visible for admin and user roles by default