Right now you can add account security to prevent the use of selected accounts and also project security to prevent the use of certain projects at a user level but there's no way to prevent the use of certain vendors. We share our database with another organization and are constantly having issues with our users entering invoice requests on the wrong vendor and it's almost impossible to catch until we get ready to cut checks.