Authorization Groups and F110

Hello, I would appreciate some input on the following:

Within the same company code, 2 seperate departments exist.They want to be able to run f110 and yet not see each others invoices.There is a proposed solution of segregating authorization groups within document type but I am not 100% convinced.

Has anyone come across this scenario before?