Control access to project, program, and portfolio financials independently

A client needs to allow a set of users to add programs to a portfolio and edit financial data on the projects in their programs, while not giving them access to the financials of the full portfolio. The ability to control project, program, and portfolio level financial access independently would solve for this issue (it is currently all or nothing).