No they are not allowed to do this, I know someone that was secretly using Facebook while at work even when they had their own private office the company could still see what they were doing on the computer. the company pays you to work, not to sit around and talk on msn.