User in hr can able to create records in PA30.But will give read only access for all infotypes

Question

Hi Team,
I have created one test role in HR. It will give Read access to all info types.
But user can able to create Info type records in PA30. Please find the P_ORGIN values below.
Authorization level            R
Infotype                       *
Personnel Area                 US
Employee Group                 1
Employee Subgroup              U*
Subtype                        *
Organizational Key             *
OOAC values.
AUTSW ADAYS       15
AUTSW APPRO 0
AUTSW DFCON 4
AUTSW INCON 0
AUTSW NNCON 0
AUTSW NNNNN 0
AUTSW ORGIN 1
AUTSW ORGPD 4
AUTSW ORGXX 0
AUTSW PERNR 1
AUTSW XXCON 0
Note : user does not have access to any structural profile.
I suspect is this bcz, if any user has proper 0105 and 0001 in HR master data can able to create records.Bcz user will be assigned to default sap structural profile "ALL"  in OOSB ?
I can see user was not assigned to "ALL" profile in OOSB or in T77UA. and user cant able to write or change infotype data in pa30.
Please suggest how the user can able to create  inftotype records in PA30.(Info :0002 for example)
Appreciate Quick response.
Regards,
Venu.

Answer 1

Sorry did not get the below comment.
"The maintain flag in the structural profile does not relate to any maintenance authorization in PA.  It only affects the OM objects authorized by the structural profile.  For example the user may be able to delimit a position.  It will never grant any write authorization for any PA infotype "
Do you mean , suppose if we give Org unit and evaluation path like attached screen ,user will get access to only the ORG UNIT  as its object type (can able to perform activities as mentioned in the role PLOG ) but cant perform any activity like address infotype change on the person (P) (as mentioned in P_ORGIN) who comes under the org unit mentioned in Structural profile ?
My understanding is that i believe user total auth is an intersection of general +structural authorization.lets take HR admin wanted to change 0002 data   for some imps in org.We need to give access to that particular org to which the emps belongs to (through structural auth) and SHOULD CHECK the maintenance box in strucural auth and will access change access via role.
And user cant able to edit his own data.
Please find the Screens as requested. Please let me know if my understanding is correct or not ?
Regards,
venu.