Restricting group access only to group users in all invoices controller actions
Limited invoices access to groups scope and group to users assigned to it