The security team reported that employees may be able to interact with other employee's reminders

[newtonbeck]

Steps to reproduce the issue

1. Employee A performs a GET request to the /reminders endpoint providing an employee B's id as the employeeId request param;
2. The employee A receives the reminders of employee B in the response;

Expected behaviour

Employee A should not be able to see another employee's reminders;

Current behaviour

Employee A is able to see another employee's reminders;