Currently any staff, volunteer or student can sign in and sign out any other team member (not just themselves), for security reasons- it would be ideal for permissions to allow/deny this ability.