Please check the authorization Object CRM_ORDER you can restrict Activity which will result in restricting priority and category.
Best option would be differentiating users such as Message creator and Message processor and accordingly assigning the mention Authorization object and activity.