Currently, the primary user access restriction is at the account level. I can also restrict transactions or reports by type. However, there should be some further way to delineate who can see what invoices, journal entries, and reports. It would be great if the account level restriction carried through to the JE's and Invoices such that those items were not even visible if they did not include an allowed account. Currently, all invoices/JE's are available to view. Restricted accounts are simply starred out. Unfortunately, this is not sufficient. Once you've seen the vendor and amount in our organization you can basically figure out what department it was for. The reports also need to be limited in some way. Perhaps they could be limited by a permanent filter using tags? It clutters up a users interface when they can see everyone else's reports (especially if they don't know where to look for their reports). This seems like a fairly important feature. I find it curious that for a system designed to support multi-departmental organizations does not have this.