Actually in 4c4 even if you do not have direct access to the session you still have to have permissions to it. We use dem flows to take care of that part and we also wrote our own run program. Our run program makes sure the session is on the dem flow - those are the only ones that can be run using it.
Do you have source code for the session? I am wondering if there is like a function or something you can execute with the form command?
Another option is - since you don't want them to have direct access. Is to give them a display screen (you probably already did this) with a button to copy. When they hit the copy button you can go read from the baan tables the data you need. Then like Manish says you could just do a bunch of put fields and an insert of a new record.
My latest mantra - make sure you have latest stpapi patches and the latest session object. If on LN then please explore the option of using DAL2 functionality.
systems provided free by Baan Board
Play the Google game and help Baanboard get better rankings. Do your part. Click here
to find how.