authorization for process type

Hi everybody,

there is a process type for example ZZ10 and i want to that only one user can create, change, display and delete this process type, other users can onyle display this process type.

i created pfcg role 'Z-SAP_CRM_UIU_SLS_PROFESSIONAL'  and actived the object like in below

And then i generated that object and assign to the user. But the user can still create and change ZZ10 process type.

what should i do?