Authorization maintaining OM data

Hi Team,

Recently we had a request to check if creation of Global objects (O, 9O etc) & maintaining relation between these objects can be separated via authorization.

I did ST01 trace for both these activities & noticed that same checks are being done for both. Hence it seems that its not possible to differentiate these via authorization.

Need your suggestions & advice if the above is correct? If not, how can these 2 activities be differentiated by authorization.

Trace results: (Creating global objects)

16:25:06,823 AUTH         PLOG       RC=0  PPFCODE=INSE;PLVAR=01;OTYPE=9O;INFOTYP=1000;SUBTYP= ;ISTAT=1;type=TR;name=PP01;

16:25:23,903 AUTH         PLOG       RC=0 PPFCODE=INSE;PLVAR=01;OTYPE=9O;INFOTYP=1001;SUBTYP=AZR2;ISTAT=1;type=TR;name=PP01; 

Trace results (Maintaining relation to global objects)

16:30:24,258 AUTH         PLOG       RC=0  PPFCODE=INSE;PLVAR=01;OTYPE=9O;INFOTYP=1001;SUBTYP=AZ02;ISTAT=1;type=TR;name=PP01;    

16:30:24,259 AUTH         PLOG       RC=0  PPFCODE=INSE;PLVAR=01;OTYPE=O;INFOTYP=1001;SUBTYP=BZ02;ISTAT=1;type=TR;name=PP01;   

Thanks,

Nivin