Allow full administrators to control what other admins with the "online payments" privilege can view/update with this feature.
ORIGINAL POST:
The "online payments" permission allows the user to access all features on the payment page, including updating bank account information. I would recommend making this a separate permission.
We would like to give our bookkeeper access to payment information, especially payments received. However, we would prefer that they not have the ability to change bank account info. A dishonest person could use this permission to redirect funds to a personal. Alternatively, generate an email to admins and other users with payment permissions whenever bank account information is changed.