Timesheets will be locked if an active payrun exists for that pay period.
Only management with Access Control > Payroll/Admin > Payroll - Full Access settings will be able to make changes to the Timesheets for that period.
An Ad Hoc payrun can be generated instead to bypass this protection.