Hi,
similar questions have been answered on this forum multiple times. Hence using a search functionality will give you an answer to your question. Summary is that you can try to use standard object provided by SAP or SAP provides a BADI that can be used to implement custom authorization checks.
Cheers