Three levels of authorization in MIR7 and MIRO.

Hi all.

My scenario in posting invoice is like this:

One user is responsible for entering the incoming invoice.

One is responsible for checking it (without posting to FI)

One is responsible for final confirmation and posting to FI.

But the problem is that we have only two transactions: MIRO and MIR7.

Can anyone help me manage it? is it possible to restrict different activities in MIR7 by different objects? for example one can only hold and one can only park.

Regards.