Need better control of employee permissions