Restrict self reported volunteer hours

We work with volunteers who have court mandated community service hours. They cannot log their own hours but must check in and check out from the kiosk. We need the ability to restrict the ability to add hours and enter time in/out.