Hi,
first, I don't know what CID stands for. Anyway, for BADI you will have to implement it, find a suitable method that can be used to perform additional authorization check and then figure out what this new check should be checking for. You will need a developer for this.
Cheers