Which of the Following Is Not a Desired Access Control

Which of the following is not a desired access control when developing a purchases and payments business process?

A) The person placing the purchase order must not receive the items.
B) The person returning items to the supplier must not view the original purchase order.
C) The person receiving the order must not see the original purchase order quantities.
D) The person paying the supplier must not be able to modify the purchase order.