Intention Employee Authority$/$Action Access Controls

Order products from reliable suppliers at the best available prices to meet required delivery time.

Manager approval required for orders $>$ $$5,000$; employee ordering products must not manage inventory.

Employee preparing purchase orders cannot modify product inventory records, receive items, or pay suppliers.

System must provide purchase order number control, default values, and range and limit checks and must create an audit trail.

Record receipt of items promptly and accurately.

Employee receiving items must not be same employee who ordered the items.

Employee receiving items cannot modify purchase orders or inventory records; they cannot view purchase order information regarding quantity ordered.

System must only allow employee to enter the number of items received, subject to range and limit checks on quantities received; date of receipt defaults to current date.

Reject defective items; record acceptance promptly and accurately.

Employee assessing items must not be same employee who ordered the items.

Employee assessing items cannot modify purchase orders or inventory records.

System must only allow employee to record the assessment; date of assessment defaults to current date.

Place accepted items in proper inventory locations promptly.

Employee placing the items in inventory must not be same employee who ordered the items.

Employee placing items in inventory cannot modify purchase orders.

System must specify where items are to be placed.

Return defective items to suppliers promptly.

Manager approval required for defective items return.

Employee returning items cannot modify supplier information.

System must supply supplier return address.

Pay suppliers accurately, taking cost$-$ effective discount terms.

Employee making payment must not be employee who ordered items or received$/$ accepted items.

Employee making payments cannot modify purchase orders and receipt$/$ acceptance records.

System must supply supplier payment information and amount of payment; payment date defaults to current date.

Business rules implement internal controls. Review Exhibit $8\mathrm{.}6$ and describe which business rules implement segregation of duties. Classify each of those business rules as obligatory, prohibited, or allowed as described in Chapter $5.$ Can you please answer the question with this information