In this scenario, the ALE users only require the authorization for creating and receiving IDocs. They do not need the authorization for the receiving application. You can therefore, restrict their authorizations to a minimum.

The authorization object for receiving an IDoc is B_ALE_RECV. It contains the field EDI_MES, which enables you to specify the message type that the user is authorized to receive.