I found a problem in user permission,
when a user has Limited access to specific section for example user A has permission to do “View, Create, Update, Delete” on Employee section but if user A has link of Journal Entries then user A can do anything that he/she want.
It’s problem for a business that has many users with Limited access.
The way user permissions on business level are currently implemented is to hide user interface elements. This is good enough for unsophisticated user but I agree - not a bullet-proof solution. I will mark this as a bug because I’m working on new user permission module which will resolve this issue.
@Tut, if the above comment was for me, then thank you for letting me know that I wasted your or someones time whereas it wasn’t my intention. It is my first time posting here and I might not have even noticed I posted it twice.
Guys, thanks for the help, it has been resolved. Although last night I gave a viewing right but it still gave a full access to my user, I had him logged in & out a couple times but it still didn’t help. So I eventually had to delete the user.