That generally makes sense - my only concern is that you don't check that the current user is an HR employee, allowing anyone to edit anyone else. But if you add that later (or just don't care right now), that's fine.