Security type S and access to menus

Please help an auditor understand the 1s + 0s under Authorized Applications
and Authorized Programs.

They way it was explained was under the Applications, for example 
ACP
  0

This would indicate that the user does not have access to the ACP menu.

However under authorized programs the same user has:
ACP155D
     1

This tells me that they can access just that ACP function.

Here's where things start get confusing.  User A has Application ACP 0 and
Program ACP900D 0 , ACP910D 0, ACP920B1 0 and ACP920D 0  (all of them listed
twice).  Sounds kind of redundant or is this just to make sure the user
can't get to those programs.

To top it off the user has a security type of S.  does this mean that none
of the above matters?  I've already RTFMd but BPCS doc is not the most user
friendly.

I've got financial auditors trying to determine what a user can get to
though the menus.  I thought it would have been easier to sit at the users
screen and just access the menus that come up.

Sorry for the longwinded question, any help will be appreciated.

Thanks,
Bob Mack
IT Auditor
 
+---
| This is the BPCS Users Mailing List!
| To submit a new message, send your mail to BPCS-L@midrange.com.
| To subscribe to this list send email to BPCS-L-SUB@midrange.com.
| To unsubscribe from this list send email to BPCS-L-UNSUB@midrange.com.
| Questions should be directed to the list owner: dasmussen@aol.com
+---