When managers are entering timesheets on behalf of an employee the employees permissions should be honored. For example: Salaried employees are restricted to particular codes (based on a code group), however, when a manager enters a timesheet on behalf of the employee they have every code in the DB available to them. Or where an employees timesheets come from a third party system and therefore the employee doesn't have access to CT, the manager should not be able to enter timesheets for that employee via CT. Current work around is to reconcile back to third party system and to check for any timesheets codes used in error, then impersonate the manager, go in and correct / remove the entry