Fix timesheets 404/403 by adding missing permissions and reordering routes to prevent path conflicts.

Iniital Commit