SOA filling the Gaps

Few years ago I watched a bank's branch working process. Senior Bankers received a digital card which should be passed prior to executing operations requiring higher level of Authorization.  Other bankers has lower Authorization level. They did not receive these cards. They are prohibited from executing high level authorized operations. The Computerized Branch systems were built according to the defined Authorization levels. However, Senior Bankers were busy. When another banker asked a senior banker to perform an operation very often he gave him his digital card instead of executing the operation and asked him to execute the operation behalf of the Senior and Busy Banker. The real Authorization system was different from the formal analyzed, designed and developed systems. The real system authorized every banker to execute most operations. The formal system limited Authorization of non-Senior Bankers. This kind of dissonance between implemented systems and ...