Role Customization

Summary:

What privilege should I remove from the "Accounts Payable Invoice Supervisor" role so that I cannot add lines once an invoice has been posted?

Content (please ensure you mask any confidential information):

Version (include the version you are using, if applicable):

Code Snippet (add any code snippets that support your topic, if applicable):