Yes, more granularity is required. The main problem we have with the current IO role is that it allows the user to see a lot of info that we would rather keep hidden. Ideally, we would have a permission that was restricted to "raise draft purchases" and then have that user only able to see the draft purchases that they themselves have raised.
Yes, more granularity is required. The main problem we have with the current IO role is that it allows the user to see a lot of info that we would rather keep hidden. Ideally, we would have a permission that was restricted to "raise draft purchases" and then have that user only able to see the draft purchases that they themselves have raised.