Program uses below code to update IT0003, does it mean it's lack of authorization check?
if SY-SUBRC EQ 0 AND l_MD_flag = '' AND l_PDC_flag =''.
* for record change log
perform update(rpupdctl) tables old_p0003 p0003
using 'X'
'X'
'X'.
* for record change log
W_OK = W_OK + 1.
IF P_KOABR EQ 'X'. "NMH0448731
IF D_KOABR EQ 'X'. "NMH0448731
PERFORM SET_MCW. "NMH0448731
ELSE. "NMH0448731
PERFORM RESET_MCW. "NMH0448731
ENDIF. "NMH0448731
ENDIF. "NMH0448731
ELSE.
IF l_MD_flag = 'X'.
PERFORM SAVE_ERROR_LOG USING PERNR-PERNR TEXT-L04.
ELSEIF l_PDC_flag ='X'.
PERFORM SAVE_ERROR_LOG USING PERNR-PERNR TEXT-L05.
ELSE.
PERFORM SAVE_ERROR_LOG USING PERNR-PERNR TEXT-L02.
ENDIF.
ENDIF.