Clients can see Company and other Client's time entries

[JonDeG]

This commit (Project-Pier/ProjectPier-Core@4bfce24) made a change that client company users can see the 'Time' tab. It allows clients to see both the company's time as well as other client's time (and billings). This seems very wrong to me. Does anyone have an opinion on this? I suspect it would be acceptable to allow the client access to the "Time" tab as long as the results were filtered to only show that client company's time entries, omitting the host company's time and other client companies' times. Opinion's welcome.

[Engelbert]

👍 on your view @JonDeG
maybe even filter the results on "what kind of user" of the client company is watching the times.