Authorize Employee actions
Authorize Request actions