Restrict access to certain supplier invoices to a smaller group of people

Summary:

Restrict access to certain supplier invoices to a smaller group of people. Currently all supplier invoices are available/visible to all system users for Goods Receipt. Some invoices contain details of health data such as dyslexia assessments and employee name. This is in breach of UK GDPR as this is special category data and should not be available to all users

Content (please ensure you mask any confidential information):

Version (include the version you are using, if applicable):

Code Snippet (add any code snippets that support your topic, if applicable):