Just curious if anyone knows of an efficient way to block certain users or even all users from being able to post to a GL directly from AP.

Basically related to capital items.  Trying to ensure my property controllers or GMs don't try to sneak expense items into the capital GL.