Edit window and four-eyes principle

Under Admin → Companies → Edit window for working time super admins set for how many days after the working day times can be changed directly (0 = no window, the default). With a window of 14 days a day stays open through the 14th day after it, counted in the person’s time zone.

Auto-approval

Within the window, entries a person adds afterwards and their time corrections apply at once if they have the permission Auto-approve: manual time entries and corrections (Admin → Users). The company can force this on or off for everyone under Admin → Companies; its rule comes before the personal permission. The same holds for Auto-approve: absences.

After the window: four-eyes principle

After that nobody changes the times of a day directly any more — not even admins. Every change becomes a request a second person approves (four-eyes principle), never the person concerned and never whoever made the request:

• Admins edit an older entry in the edit form as usual; changed start, end or break times are saved with a reason as a proposal. Location, note and project change at once.
• Deleting only works through a request: choose “Delete the entry” in the edit form or the correction form; the entry stays until a second person approves the deletion.
• Added entries and corrections for such days apply only once approved, also with automatic approval and also for admins. Klokk refuses bulk entries for such days and undoing them.
• The requests are listed under Admin → Requests with a note on the four-eyes principle and, for proposals, the name of the person who proposed it. Whoever may not approve sees no approve button. The person concerned sees the proposal under Requests but cannot withdraw it.

Anyone who may approve the person’s requests may approve — except the person themself and the proposer. The person’s approvers are notified (the department’s managers, else admins, else super admins) without the proposer; if nobody is left at one level, the next one. Time account bookings and absences are no working time records and are not covered by the window. A closed month locks every change instead; reopening it follows the same four-eyes principle.