authorization who can log what on time entries