A separate access level should be created for brought forward entitlements. Currently, anyone with modify access can change how much leave/allowance etc is due to them.