You can't only allow validity date fields via authorisation object? Why do you only want validity dates and nothing else?
If you need to do this, build a variant transaction and make the other fields display only. Assign the custom transaction to the user. It will mean though they cannot have SU01 or SU10 otherwise they will get the other change access
Regards
Colleen