That is quite correct and yours is exactly the scenario TimeCard is built for. Users cannot change their time once they post it, paper time records are eliminated and the time reporting are kept secure electronically.
If a mistake has been made, though, there is a possibility for the admin to change the erroneous appointment in the database.