
I hope someone can explain how to keep users out of financial information. I have users that should only have access to orders, customer, vendors, production, inventory, etc.
They should not be able to see amounts in the chart of accounts, posted purchase invoices, other critical financial areas.
Actually you can setup roles and permissions for blocking data visibility. I agree that this could not always be enough, some numbers are still visible (but the user can't go into details if there's not the right permission).