BW Security roles based on query

Question

Hello All,
If a User 1 needs to have access to ZQUERY_1 restricted by a company code AB11 and need to have full access (without restriction to AB11) to a different query ZQUERY_2.
Similarly if a User 2 needs to have access to ZQUERY_1 restricted by a company code AB22 and need to have full access (without restriction to AB22) to a different query ZQUERY_2.
ZQUERY_2 has company code as one of the characteristics.
This is what I canu2019t do (I think):
1)     Create an authorization object Z_RS_AB11 through T Code RSECADMIN to include the company code AB11. And then create a role with ZQUERY_1 and ZQUERY_2 as the only query that the role will give access to. Using RSU01, insert the authorization object Z_RS_AB11 (for the Company Code AB11) and assign it to User 1.
This wonu2019t work, because with restriction to User 1u2019s profile on, User 1 would not be able to run ZQUERY_2 for all company codes.
Or
2)     Create a role where the authorization object S_RS_AUTH includes only company code AB11.
This wonu2019t work either because User 1 would not be able to run ZQUERY_2 for all company codes due to restriction in the role to company code AB11.
What are the possible solutions? Any thoughts...

Answer 1

These queries are based on many Cubes/DSOs. 0COMP_CODE are in both the queries. We are not using 0COMPANY in any of the queries. Restricting access on a single InfoObject would not allow the users to view the other query where there should be no restriction.
A Potential Solution (not sure if it could work though):
Possible solution:
Create role 1 for ZQUERY_1 and include AB11 in S_RS_AUTH.
Create role 2 for ZQUERY_2 and include 0BI_ALL in S_RS_AUTH.
Create role 3 for ZQUERY_1 and include AB22 in S_RS_AUTH
Assign user 1, role 1 and role 2
Assign user 2, role 2 and role 3
Any thoughts on this...