Read configuration from file and use it in addedit.php to determine if current user has "Timesheet approval rights". If it does, then allow setting "Approved" for this user.