How do you ensure that a user can register their own hours, but without being able to see the hours of other employees?