PA30/PA20 Generic Object Services Security

Hi ,

In PA30/PA20 , we have the authorization to display/change infotype by HR Personel Area , and that is working well . We want to Attach Document using the Generic Object Services functionality .

But even if I do not have access to the infotypes for a given HR# , I can display the Attachments in the Generic Object Services !!! How can we put some Security/Authorization on this functionality ?

Thank you .