We want to lock users out of entering time ahead on their timecards.
However, this means they cannot enter time ahead for PTOs.
And when we lock-out the time-head availability, it locks it out for everyone, even admins.
We need the ability to have a sort of "HR admin" functionality so that person can have enter-ahead access.
