EVO timesheetNotes : permissions

+ FIX bad usage of $this->session_user (some global replace error ?)