PO & Receipt internal control

Hello, My company just start to use Sage 300. One question we meet is AP can retrieve or apply invoice with receipt exceeds PO and receipt value and quantity w/o warning and can go ahead. I think that should be security problem, anybody can give me a answer? 

Another question is PO PR, every time my guys print that in paper and can we just not print it or print it in PDF and continue look at in the system?

i use other software before and never meet such kind of problem. All answers are appreciate. Frank