Issue Description: We have locked down the Stock Item screen to prevent users from adding/modifying vendors on inventory items. However, we've discovered that users can bypass this restriction through the Purchase Order workflow:
- User creates a PO with a Stock Item and adds a vendor that isn't currently associated with that item
- When the PO is received, the system automatically adds the vendor to the Stock Item's vendor list
- This circumvents our intended security controls on Stock Item vendor management
Current Setup:
- Stock Item screen access is properly restricted for regular users
- Users have appropriate rights to create and receive POs
- This appears to be happening during the standard PO receipt process
Question: What's the recommended approach to prevent vendors from being automatically added to Stock Items during PO receipt when users don't have direct rights to modify Stock Item vendors?
I've considered:
- Purchase Order Preferences settings (but haven't found the right option)
- Stock Item Class configurations
- Custom validation during receipt process
Has anyone encountered this issue and found an effective solution? Are there specific configuration settings or customizations that can block this automatic vendor assignment while still allowing normal PO operations?
Any guidance would be greatly appreciated!
