Hi Jurgen
Agree but if you do add optional authorisation F_IT_ALV you can restrict the user from creating their personal variants (though it's been a while). Full access to F_IT_ALV is the same as no access to the object.
But yes, that was my point - you can't stop the default flag as it's not secured unless you take away all ability which does not make sense for a user.
Regards
Colleen