In the permissions section, add a flag to activate/deactivate the edition of one's personal information. This way, admins would be in control of any changes made to the employees' info (such as bank account number, address, etc.)