[BUG] Elevated user privileges

[scgallafent]

We did some testing on this earlier in the week and were unable to reproduce a situation that would give the user access to finances. We were able to duplicate some of the other items described and that has started some internal discussion on how to best address what we're seeing.

We see what you're seeing and now we've got to figure out what to address and how to address those issues. I think Kent did his testing back to 3.4.3, so this isn't a new issue. Please be patient while the wheels turn.

If someone is able to get to finances with an organization-only user, let us know so that we can look into it.

Steve