Require permission to view invoice list