Hi
You can create permit via IPMD with or without classification.
Then you can assign the permit manually in the order with a permit key (field PMSOG). In your case you can use authorization object I_SOGEN to control issue of permits
Regarding control on deletion of permit try to use user exit IWO10007.
Thanks