Diffuser contains enhancement spot /BTR/MDR_ENH_AUTH_CHECK. Go to SAP standard transaction SE18 to access it.
This enhancement spot contains BAdI definition /BTR/MDR_BADI_AUTH_CHECK_EXP which can be implemented to restrict access to both the Expert Mode functionality and the Technical Settings of Diffuser programs.
To implement BAdI definition /BTR/MDR_BADI_AUTH_CHECK_EXP create a custom class using interface /BTR/MDR_IF_AUTH_CHECK_EXP in SE18 (More information on how to implement a BAdI can be found in SAP standard documentation).
Once your class implementation of BAdI definition /BTR/MDR_BADI_AUTH_CHECK_EXP is in place, implement interface method AUTH_CHECK_TECH_STTGS.
The example above uses custom implementing class ZCL_MDR_AUTH_CHECK. Click on the method name to drill into its implementation and add your custom code. The signature of this method imports the program ID so you can set restrictions at program level.
The following sections will demonstrate how to implement controls around Technical Settings, Expert Mode and Individual Actions.