Hi Peter
You can check if the auth objects C_ARPL_WRK or C_FVER_WRK satisfy your requirement. However, I am not sure if these are being checked in the program.
Maybe, you can look at adding a validation to check the plant authorization whenever CK13n is accessed.
Regards
Sowmya