Security Copy mess

Hello,

I set up AP, GL and AC for SEC1 security class and went to data security and did INQUIRY ONLY for everythig. I was told that this won't stop users from submitting the batch programs in those modules. So I went to each batch program (non-reporting) and took all the options out except for INP.
Q: Is that the best way or there is something faster than this?

Now I had to set up a new class SEC2 where it had INQUIRY ONLY for AP and AC but full access to GL. I copied SEC1 to SEC2, deleted GL and then added GL back thinking that GL would have full access. Checked the data security for GL for SEC2 and it was ok. But when I checked the batch programs, I was surprised to find out that the options were only INP adn not ACDINPVSR. Please tell me that I do not need to go back to each batch program in SEC2 which changed in SEC1 adn reverese it to ACDINPVSR from INP. That would be tough job.

Thanks