Hi Pavan,
Best way to restrict the work order creation is by user status.
We have used the same in our previous client, since functional location master data will be controlled by Master data specialist, there will be only limited access, so you have already restricted the end users.
Create a user status, assign to functional location, update all functional location by running LSMW.
This will be a one time activity.
Thanks
Terence