Could we restrict ability to approve hours in CATS_APPR_LITE and CAT7?

Hello everybody,

we're looking for the way to restrict ability of users, that access to CATS_APPR_LITE transaction, to approve hours only entered by specific CID(s).

Is there a specific authorization object that drive the ability to approve hours?

and is there a similar object that drive the users accessing CAT7 to transfer data in controlling (data about hours in WBS)?

Thank you,

Patrick