Limiting a User to a Department

[Luke <..hidden..>]

I thought I remembered that this could be done, but can't find a way.

Is there some method, for causing a particular user to only be able to 
generate invoices, etc., against a specific department?

Thanks

Luke