We had to disable the ability to post journal entry batches for non-supervisors due to the fact that there isn't a current security role setting that disables the ability to post your own journal entries. We did not want the same user to be able to create and post their own batch. However, a user could create a batch and post another user's batch, but not be able to post their own batch.