It would be good if you could differentiate the rights for invoices so that project managers can view the invoices but cannot process them.