How do I restrict PT60 Schema transaction to Personal Area?

I have tried to restrict it throgh personal area but no luck. Same with PPOME transaction even though the users have only restricted PA access but they are able to change Org structure.

I ran the trace and it shows that it checked P_ORGIN for specific Personal Area but then bypass that check and was able to update the change.

Please help!

Regards,

Zee