Restricting the access of Payroll Users

Requirement :

1. They shouldn't update their own records...we need to restrict the updates and see their own data in read only mode.

2. For other employee records they do the changes of insert/update/delete.

Please let me know if pointers for this requirement. It would be helpful for us to achieve this requirement.

Thanks,

Sravan