Is there a way to prevent certain purchase invoices to show up for a certain role? The criteria is not based on the employee field, segmentations and subsidiaries. It's based on a custom field. I can probably create a workflow with a Return User Error action but they would still be able to see some data via searches?