Implement data access control to manage invoices within the same BU

Summary:

Why can users see all invoices created by the others within the same BU, without the ability to control permissions and restrict users to only view their own created invoices?

Content (required):

Considering the current business flow, AP invoices are submitted by the business department instead of Finance. Therefore, we need to implement user-level restrictions on the invoice page to ensure that users can only view their own created invoices and are unable to view or edit invoices that do not belong to them.

This kind of control can be applied in other modules. For instance, in Procurement module, there are several pre-defined roles in procurement agent access configuration.