Held documents posted in the workbench

Dear experts I'm facing the following challenge:

We activated via EP2 held documents for manual postings in BCS. This is done for two reasons:

1. for the consolidation team to continue working on a document which was not finalized

2. to be able to work with the new workflow functionality, which means that postings from the consolidation team need to be approved by the consolidation unit

In the case a held document is created, it appaers in the consolidation workbench under held documents. It appaers there in the form of a document number.

When a consolidation unit now needs to approve a held document the authorizations check if the consolidation unit user has authorization for the workbench (UCWB). But in fact we do not want to grant these users authorization to the workbench.

Has anyone else seen this before? And how to deal with it? Also strange that all held document numbers become visbile in the customizing, no?

Thanks for any input.

Kr, Ewald