Hello.
It's not a correct answer in term of security. You should use system user only for internal usage (for instance, if your system calls itself). But if the system was called from external system, you should use communication user and set different security policy for this user through transaction SECPOL.