extra permission / sub permission

when making a new invoice employee has the ability to change unit price even if they dont have the permission to edit products
the idea is to separate the permission of making invoice of editing certain fields of like unit price to eliminate the human error because in multiple occasions an employee changed the price instead of quantity and he submitted the invoice the error caught up by finance but why to allow it from the beginning.