I gonna set up erpnext on aws cloud with a public ip address.
So that our employee can access our erpnext.
But the problem is the accounting module.
My boss does not want to open the accounting module on public.
Our accounting team should have two user id to login erpnext system for now.
Employee ID can access erpnext on the public.
Accounting User ID can not access erpnext on public. Only they can login our intra- network.
Use Restrict IP on User
Is there any better idea to control permission by ip address?