Hi,
These are the object that you should check and adjust in roles assigned to user.
S_TRANSPRT
To secure functions that change requests and tasks.
S_CTS_ADMI
To secure the administration functions of the CTS.
Take any user from production, goto suim and search for roles assigned to user having these objects.
Edit those roles, remove authorization and generate auth profiles
Divyanshu