transaction SWI1: different authorizatios

[Michael Marten]

Hello,
we defined an extra activity group CXX1_WFM_CONTROLLER
(which is a copy of SAP_BC_BMT_WFM_CONTROLLER_AG).
 
Can a user (which userid is assigned to this authorization group)
- execute work items?
- forward work items?
- restart workflows, restart work items?
- reserve/replace not his own work items?
 
Is there a possibility  to use authorization object to allow/disallow such
actions?
********************************************************************************************
There is an authorization object:
S_WF_WI      Workflow: Work item handlin
WFACTVT    Activities for authorizatio
This is not used within the act. group CXX1_WFM_CONTROLLER.
Does it mean if we assign SWI1 to the group that a controller
can only display without any other workflow maintenance authorization?
 
Michael from sunny Hamburg/gemany