The setting “Employee can assign themselves to a project” should be converted into an authorization so that you can grant it or not, depending on the authorization role.