I need to apply an expath contrain for submitting a request, and should be done only by enployees itself.
Constanza Pérez-yarza Ayala
You have to give an Xpath constraint ,
and gove the employee role to create and delete,
Hope it helps!