Restrict set up Substitution from SBWP

HI,

I'm new and I'm really appreciate your help.

I have a question regardig authorization objects.

Do you know who can I restrict the setting of Subsitute from SBWP? They can only be set from UWL.

Do you know the authorization objects which control it?

I find the following authorization objects:

S_TCODE = SSC1

S_TCODE = SSC0

If there isn't any authorization object to control it, do you know how can I do it from coding?

Thank you in advance!