Hi,
I would suggest to go for authorization method. You may use the authorization object M_MSEG_WWA or M_MSEG_WMB to restrict the usage of the particular plant at MIGO level. You may use the same concept in case of other transactions too.
Regards,
AKPT