You have security rights for people being able to enter transactions, but anyone is able to generate a receipt.  From a risk management standpoint it is a possible issue for anyone to be able to generate a document used for tax purposes, as it could be modified and used incorrectly.