In addition, the option to have a manager or similar role set the milestones and have an "employee" or employee 2 role user not be able to change milestones is critical.  The manager sets milestones and wants to know when those are deviated from, if the employee can move those it defeats the purpose of color coding for some companies.

The viewer and other roles don't give functional tools for an employee, so there should be an option to limit this permission and/or choose what permissions associated with what roles.

Does anyone see a work-around for this?