this screenshot you show, for what extension is it?

in backend, there's no "readonly" option of IM / EM, the access is "complete" or "denied" for all actions.

The screenshot is for expense manager from the backend.

I have created a user and i i set the create, delete .e.tc to deny for the user group.

However, users in this group are still able to create expenses. It appears that the deny (for the create) as seen in the screenshot is ignored

Hello,

this screenshot is not the default one for Expense Manager permissions tab. see attached image, this is the correct one.

if you're seeing the screenshot you sent me, it means you must have some external ACL tool that is "created" these additional permissions, that are not native in Expense Manager...

Apologies for the confusion. I have attached the correct screenshot here. My expectation from this screenshot is that the user/group assigned this permission should not be able to create, edit or delete expenses however this is not working.

Users in this group are still able to create, edit and delete expenses in the expense manager

this is supposed to happen for the Frontend of the application. is there where the error is occuring?

No. This error is from the backend. I am using EM purely from the backend and I want to have this kind of control to ensure that people can only perform the action that is appropriate to their level

ok, well that's the thing. those permissions are set for the frontend, in the backend those permissions have no effect (only the one to "access administrator interface")

Thanks for the clarification. Is there a way to hide the backend Expense Menu button for specific users? Just want to make sure they are unable to create or delete records

not directly, this would require a bit of coding on the extension backend permissions

Hi, im very interested on buying Invoice Manager but i have the same problem. I need to give and take permissions to specific users on the backend. If you can gide me, I am willing to do the coding, but were can i find the permission section?

Thank you for your super fast response. My scenario its as follows. I need person A to see, create and administer his own invoices, and person B see, create and administer his own invoices but can't see or edit person A invoices and vice versa and person C to access and edit everything like a super admin. As I mentioned if you gide me i am willing to do the coding. I hope i explained my self better, I can write in Spanish if there it's no problem, it's my first lenguaje.