Model Design Guidelines

Avoid hard coding of Roles

No business logic should be based on hard coded roles. Either make it a configuration or set a property in User / Employee whether user has the permission to do the action.