User Should only create GL Journal but should not post either manually or Via Adfdi

Hi Team,Our requirement in General Ledger is all users except one should only create or import Journals either manually or AdFDI should not POST them as per internal audit requirement.Maually i achieved via Custom role but by Adfdi i am unable.(Even through Lookup also) Can any one help me out in this regard.

Nagarani.k

8978961434