I can't test the behavior in CAT2 because only time administrators have access to that transaction. As for the ESS profile in CAC1, I don't see anything about choosing which codes can or cannot be changed, only the check box to not allow changes after approval, which is unchecked.
I can try to check the status in CATSDB but I wouldn't think they would be any different between unpaid and paid absences.
would you know what the SAP standard security role is for using HRESS_A_CATS_1 so I can compare authorzation levels for IT2001, 2002, and 2006?
Garrett