Employees are currently able to view all Ripples, background and interactive, and assign to themselves even if they are not the target audience.
Only Admins should be allowed to see and assign Ripples, with employees only being able to view/update Ripples they have been specifically assigned to.
We have now had several employees assign themselves Ripples that weren't intended for them, this could also pose a security risk were sensitive data required in a Ripple.