[security] +access to membership.invoice for partner_manager group