It is not clear what you mean by "calling the Application.runOperation". I assume you are talking about an external program. Are you using a custom POS button to call this new addin?
If you are, then just setup security on the pos button. If not, then how are you interacting with RMS.
Also, RMS assumes that your addin will check security and make its own decision about access and operations that are allowed.