Klees enforces a clean separation of duties: nobody below the Owner can change their own timesheet or their own permissions. It protects your payroll data and keeps audits boring.

What’s blocked for non-owners on their own records

Editing, adding, or deleting their own time entries and breaks
Approving or unlocking their own days
Changing their own Permissions, GPS & Time, or Manager Settings — role, GPS requirements, overtime rules, tracking toggles, manager assignment

Anyone who tries sees:

You are not allowed to edit your own permissions or timesheet settings. Contact your company owner.

Important

The block is enforced server-side, not just hidden in the UI — an API call attempting a self-edit is rejected regardless of role, custom role, or how the request is made.

Who fixes a manager’s own time then?

The Owner can edit anyone’s time, including their own.
Another admin or manager can edit a manager’s entries the normal way — restrictions only apply to your own records.

Why it works this way

Time data is money. If a supervisor could quietly adjust their own hours or grant themselves permissions, your approval chain means nothing. With this rule, every timesheet is signed off by someone other than its subject — and the audit log shows exactly who changed what.