Hi,
If you check in SU24, you could find two authorization objects - one is transaction code check and the next one is "Warehouse Number / Storage Type" (L_LGNUM). You can make use of this object for controlling the authorization in standard.
If you want to restrict the authorization for TO confirmation, you may remove the access for LT12 using the object L_TCODE
Regards,
AKPT