Added basic authorization rules for Shifts and Employees