It is necessary to make sure that only managers have access to information about the employee and can change it, how?

Question

PostgreSQL

There is this code:

CREATE FUNCTION log_salary_access() RETURNS trigger AS $log_salary_access$
BEGIN
IF OLD.manager_id != current_user THEN
RAISE EXCEPTION 'access denied';
END IF;
RETURN NEW;
END;
$log_salary_access$ LANGUAGE plpgsql;
CREATE TRIGGER log_salary_access AFTER UPDATE ON employees
FOR EACH ROW EXECUTE PROCEDURE log_salary_access();

,

But it is not correct, because after checking it was written to me that this would not work correctly:

This is how the table looks like:

Here is the direct control (mediocre) of manager 100: Here is the direct control

, that is, manager 100 controls the managers that are in the figure above and manager 100 manages (changes information about them) employees who report to managers, which are in the previous figure. And here is the list of subordinates is much larger than with mediocre management: