Critical combination of tcodes in FI

Hi all,

is there any combination of tcodes in FI, for which the user should not have authorisation?

for Ex... in MM : the person who creates a PO, he cannot create a GRN due to security purposes

please give some valuable suggestions regarding this ASAP

Points will be awarded

SUNIL