ESS Security - Double Verification

Hi Experts,

I am trying to implement the concept of double verification within ESS. My requirement is that the employee should be able to modify an existing record or create a new one but only with the lock indicator, so then the HR Administrator can go in the backend and remove the lock indicator once he's checked the information (the main purpose being to avoid developing a workflow).

I've read a lot about the concepts of double verification and went through something like 60 posts, but still i can't manage to work it out.

I've made a copy of the standard role SAP_ESSUSER_ERP to modify authorizations. Let's take the example of infotype 0006 - Address. I've removed this infotype from existing lines of class P_PERNR to isolate it. I've created a new authorization object in which i tried to play around with authorization levels. The theory is that authorization level should be set to R, E or R, E, M to allow this. However i've tried that and it doesn't work as i'm getting an error message at the review step of my iView saying "You do not have authorization to change". The only authorization level giving me this authorization is either D or W, in which case the lock indicator is not set.

Anyone has ever done that this way ??

Many thanks,

Sylvain.