Could someone of you help me on how to go about mainitaining authorizations at query level. I have a Query which is accessed by different vendors through a portal. I should ensure that necessary authorizations are maintained so that one vendor should not be able to view unintended data.
Any insights on this are highly appreciated...
your problem can be solved in two steps: first of all define a Profile to see data and than integrate a Custom Authorization Object to restict on the basis of one (or more) Characteristic values (eg. each vendor is responsible for one or more Area and must see only tese data) using TCode RSSM.
About authorizations you can find some good docs in service.sap.com/bw under InfoIndex -> Authorizations
Hope it helps
this can be achieved easily with implementation of reporting authorizations on the queries you wish using transaction RSSM and PFCG.
here are links to the topic reporting authorizations.
check the example given there for more clear understanding of this concept
hope it helps