How to limit the user from using the Close PO Schedule by Spreadsheet to close other buyer's PO

Summary:

The user has a category manager role which inherits the buyer role to close or finally close the PO lines. In addition, the user is added to the procurement agent with the "Modify" access to other agents' documents for managing purchase orders. In UI, it looks like the user has access to close the PO lines by using the "Actions" if it's a buyer on the PO. However, the user can close all the POs (including other buyer's PO) by using the Close PO schedules by spreadsheet feature. It seems like a contradiction to security access control. How can we