Pay statement Issue

After we applied LCPs recently, we started noticing that employees for whom GEM (Global Employee Management) is activated

When they choose paystatement, they get a message "Insufficient authorization to display your salary statements"

Based on our analysis, this needs auth to P_ORIGIN , IT-0008, Read access.

Before applying the patches, all these users were able to view payslip without any problem.

Does anyone else faced this issue ?

Though we could give read access to P_ORIGIN, we have enabled PA20 tranactions for certain users. So once we provide this access, these users wil be in a position to view IT-8 which we do not want to happen.

Is there a way to display payslip but not display IT-8?