Allow everyone to see the entire request database, but allow changes only to plans and children which are owned by the (non-admin) logged in ACP user / Scheduler observer. Retain ability of ACP admins to change anything.
Easier than I thought. The tables don't provide access to editing anyway!!