New invoicing - Don't allow Invoice Only Draft Only user to select Create new item
When I am logged-in to Xero as a user with "Invoice only" and "only create drafts" permissions, it is my understanding that this user should not be able to create new invoice items or see menu options for creating new items. However, it appears this user can see this menu option when adding a line item to an invoice and attempt to create a new item, leading to an ambiguous error message.
Expected Behavior:
User with "Invoice only" and "only create drafts" permissions does not see and cannot select any menu options for creating a new item that can be added to an invoice.
Actual Behavior:
User with "Invoice only" and "only create drafts" permissions sees a menu option to create a new item while adding a new item to an invoice, and is able to attempt to create a new item, but the item save fails with an ambiguous error message.
Steps to reproduce:
1. Log-in to Xero as a user with with "Invoice only" and "only create drafts" permissions.
2. Click the "+" icon on the top menu bar and select Invoice to begin creating a new invoice.
3. Select an empty row to add a new invoice line item.
4. When the pop-up menu appears, the first option in the list is "Create new item".
5. Click on "Create new item". The "New item" creation screen appears.
6. Complete all necessary text fields for the new item.
7. Click "Save" button.
8. Error message appears: "Your changes were not saved because an error occurred."
See attached screen recording for an example of the ambiguous error message.
I confirmed with Xero support (in case CX0015982514) that this is the expected behavior. They suggested I post here to get upvotes for this feature, which to me seems more like a bug.
At a minimum what we would hope to see is if this "Create new item" menu option must appear in the list, that if an Invoice-Only/Draft-Only clicks on it, they immediately see an message pop-up saying they don't have permission to access this. Or if they must go into the new item creation screen, if they click on the "Save" button, instead of a generic error message they get a permission denied message so it is clear why it didn't work.
