security for timekeepers

So I need to allow some of my employees to enter and edit their time entries and ALSO view other's time but NOT edit that time. I understand setting up different security settings, but am unable to come up with the combination of security choices to allow one to edit their own, and see others time in reports without being able to edit that time.

Any suggestions??