user login capability - working employee restrictions