Hi,
It's all about CALL TRANSACTION statement in ABAP. It allows you to call a transaction from an ABAP program. Unfortunately, by default it does not perform standard auhtorization checks. This behavior is obsolete and now developer should explicitely say if authorization check should be performed or not. More info about statement in ABAP doco. SE97 was introduced to enforce checks. So you can add pairs calling transction and called transaction to enforce checks.
Cheers