Few authorization changes happen automatically

Hello Experts,

We restricted few users from using transaction CJI3 & CJI5. We did not touch any other control/settings.Now, what we observed is that few users who were using t-code CJ20N earlier are not authorize to use it now. We remember that we provided them authorization for creating WBS in CJ20N earlier but now they are not authorized to use CJ20N itself.

I provided them CJ20N -> WBS creation roles again with the help of Basis guy and it worked for that user. But I am still unsure of why this change happend automatically once after we restricted user to use CJI3 and CJI5 ( we removed it on t-code basis).

Kindly suggest on it.

Thanks & Regards

Saurabh