Audit has brought up the question of one person being able to create and post a journal - could we look at a way of editing user rights so that certain users can enter journals and place them on hold, for another user with different rights to then review and post the journal?