We use workflow to send invoices to the relevant user where the matched purchase order has not been booked in. The user will then goods receipt the PO, match the product receipt on the invoice, update the invoice match status and then complete the workflow at which point the invoice is automatically posted for payment.
However I do not want these users from being able to change the invoice value as inputted by our Accounts Payable team. Specifically, if say the invoice was for only part of the full PO quantity what can happen is that the user subsequently receipts the full PO line and then when matching product receipts on the invoice clicks "yes" to update the invoice quantities to match product receipt quantities and changes the invoice total (incorrectly). As the invoice matches the underlying receipt it is passes matching and can be paid.
I don't believe I can turn off this feature now as it is mandatory. Is there any other way to prevent users from updating invoice quantities to match product receipt quantities (e.g. in security configuration)?