We have view only access to our budget approvers so they can monitor their accounts in real time.  It was a nice idea to allow them to click through to see invoices.  However, even though I can restrict the accounts they can view, I cannot restrict the invoices they can see. 

This means they can view confidential items.  I've removed their ability to view invoices so they can no longer click through.  I would feel confident enabling this feature again if we could either restrict the invoices they see to the invoices in their accounts or by removing the search feature for invoice records.

Removing the search feature would still give them access to invoices, but only allowing them to pull up the invoices by the reports they have access to.