Hi Frank,
There are two exceptions to the "all or nothing" rule: Display Attributes and Key Figures. Display Attributes (of type Characteristic) need full (*) authorization to be displayed (and otherwise it will be hidden from display). Key Figures can be made authorization relevant using Characteristic 0TCAKYFNM. Full (*) authorization will allow the user to see all Key Figures. Otherwise only the explicitly authorized Key Figures can be seen (and all others will be hidden from display).
Please refer also to SAP Help.
E.g. if your BEx Query contains the Key Figures 0AMOUNT and 0QUANTITY and you are only authorized to see 0QUANTITY, then 0AMOUNT will be hidden. It should not lead to an "no authorization" error.
Can you please share more details about the authorization error (preferably an extract of the RSECADMIN authorization trace log)?
Thanks,
Sander