Here is some more info, maybe there is a better way to do it apart from what I came up with..

There are 2 security levels for staff members. Workers and Managers.

On each homepage all staff members will see 2 modules. One will be their personal module, the other, their department module. All staff can edit their personal module. The department module can only be edited by the manager. This will allow all staff to write personal notes for themselves (eg phone numbers, things to do, links to pages etc) It will also allow managhers to write important notes in the department module for their staff to read.

To put it in other words..

Workers' homepages will contain 2 text/html modules.

1. One is the worker's personal module. The worker is the only one who can view it and edit it.
2. The other is the worker's department module. All workers from this department can view this module but cannot edit it.

Managers' homepages will also contain 2 text/html modules.

1. One will be the manager's personal module. The manager is the only one who can view it and edit it.
2. The other is the manager's department module. This is the same module as what this manager's workers can view from point 2 above. However the manager can view and edit the module.