The user access levels are too generalised.
Administrators and the bookkeeper/Accountant profile have too much power and the next level down has none at all.
It would be good to be able ...
Perhaps making the locking and unlocking of a period password protected would help.