For instance, I want to allow the PM's to see invoices from COGS vendors but not allow them to see invoices from health care, other benefits or any other vendors they have no business seeing.   We have invoice images attached to the invoice record which is really what I do not want them seeing.  I have HIPA and other privacy concerns.

How have you handled this issue at your company?