Hi Markus,
Our client recently had this issue too. We identified through a ST01 trace that a HR Object PLOG was checked and the authorisation behind it was missing in the user role.
I would recommend checking your trace again and identify the checks against the PLOG object and review the check code messages associated with it.
Hope this helps.
Regards,
Ben.