We would like to have a way to give rights to an user to approve AP invoices without the option of editing all the information within the invoice. Currently if an user have rights to approve the invoice they also have rights to change the amount, vendor, etc. Given FE security doesn’t appear to provide a way to support the separate duties we need and doesn’t prevent the same person from editing and approving the same invoice