There should be an audit trail for records such as an invoice in the accounts payable module. Currently, one is only able to see the user who created the record and the user who last changed the record, which, in most cases, is the user who processed the payment.
There should be an audit trail showing any and all users who touched the record. I should be able to see who approved the invoice for payment. Since that is not a feature, an accountant could both create and approve an invoice and no one would know.
This is a serious internal control deficiency with this software. What am I supposed to tell my auditor when they ask for the audit trail on a transaction?