Authorization check at diff levels

I need this functionality:

several authorization checks should be implemented.

· Selection on Plant level (authorized yes or no is then taken care within the authorization role)

· When this was successful, check further whether User is authorized for Change, or only for Display mode. When User is only authorized for Display mode, the different button’s e.g. ‘Approve’ ‘Cancel’… are not visible at all or great out. (this is as well then on user level maintained via authorization role)

How should we do this using ABAP?

Regards