Purchase Orders Authorizations M_BEST_EKG

Hi all,

I have one USER with 2 role´s:

1ºROLE - Grants acess to create PO for for the following objects:

M_BEST_EKO=001P

M_BEST_EKG=308

M_BEST_WRK=9009

2º ROLE - Grants acess to create PO for for the following objects:

M_BEST_EKO=001P

M_BEST_EKG=002

M_BEST_WRK=9004

Could you explain me the reason why this user can create PO for the

following Organizacional Levels:

EKORG=001P

EKGRP=308

WERKS=9004

THANKS in advance!

Best Regards

JEC