hubdoc
When you add a new client to HubDoc, you must enter the client's email address. Once you grant them access, they have full access. More specifically, there are no settings to prevent them from publishing documents to Xero. This is causing a lot of duplication of work for those clients who are "trying to be helpful" by publishing receipts to Xero - they are typically coded incorrectly and often as an AR transaction instead of an AP.
Thanks for submitting your idea on Xero Product Ideas. We appreciate you taking time to let us know how we could improve Xero for you.
Your feedback will soon be reviewed by our Community team, and in the meantime this can begin to build support with votes from other community members.
If you're interested to see recent releases or get a pulse on what's coming soon see The Long and Short of it. 🙂