ACL / menu item not public
Thanks for your effort in developing this useful plugin.
Have to report a bug / feature request though.
The timesheet link in the top menu is visible even when users are not logged in. We would very much to see a fix/update for this.
The visibility of the link is bound to the permissions assigned to user roles. When not logged in, every visitor has the built-in role Anonymous. So either the Anonymous role in your installation has the explicit role to view timesheets or the permission to view time entries.
Could you please check if that is the case? If it's not, then there really might be a bug. The plugin was written as a hasty port of an older plugin while migrating the Contargo issue tracking from ol' ChiliProject 2.x to current RedMine 3.x.
I have a role that does not have any permissions on time logs (see attachment below)

The user sees the Timesheet link inspite of this. So looks like this is a bug with the permission handling ?