Security - Posting an auto-reversing journal entry

A user approves an auto-reversing journal entry - security also allows the user to post.  The user is unable to post. HOWEVER, in the subsequent period, the user is able to post the auto-generated ...