Time cards: a new role permission, "Can edit his/her own time cards" (Roles → pick a role → Time cards). Team members who have it can correct the clock in and clock out times on their own time card — useful when somebody forgets to clock out. Adding and deleting time cards still belong to the existing "Can manage team members' timecards" permission, which continues to exclude the member's own card.
Updates
Time cards: the row actions on a member's own time card now follow the new permission, so the edit pencil only appears to people who may actually use it.
Fix
Time cards: the note on a time card could be rewritten by any team member, including on somebody else's card. Editing another member's note now requires permission to manage that member's time cards; annotating your own card is unchanged.
Apps: files sitting in the apps folder (such as .htaccess or index.html) were listed on the Apps page as if they were installable Apps. Only real App folders are listed now.