Added check to make sure user can view timesheet or is owner in routing.