Hello All,

I've recently set up record security hoping this would lock users not authorized from posting to a GL Company such as 305-000. However, after locking my prefixes and GL companies, that only prevented users from being able to run reports/inquiries from them. Any user can still go into GL > Record Entries  and post entries to any GLs under 305-000-XXXX.XXXX that are not "control accounts". Is there any way to prevent User A, from still being able to post to GL Companies 1, 2, 3, but not post anything to any GLs under Company 4? 

I see there's application security, but that would prevent them from posting at all. If I control a GL, it makes it inaccessible to all I believe, unless its an admin, and then that admin would have to go uncontrol the account everytime they want to enter data. 

Thank you,