Hi Martin,
Correct me if i'm wrong. What you saying is different T-codes are used to run the same program is a different manner based on the assigned variants, Even though there is no authorization to run this T-code by this user, he might still be running another T-code (that is given authorization) that points to the similar program.
However, running the program directly through SE38, will have no protection (authorization) on how is it being executed?
Thank you for the precious guidance.