| Access to both would allow a user to change the job title on their employee record which could change their approval limit associated to the hierarchy which is keyed off the job associated with their employee record. They could also change their approval limit and enter a PO circumventing the intended controls. They could submit an invoice for processing that references the PO, if it is two-way match, the invoice would be paid. |