added permission check for ki_budget in ki_timesheet extension