How to restrict specific users defined as employees from specific modules - like bug tracker- projects or tickets or Sales-> oppurtunity