BEx Query Authorization object issue

Hi,

We are on BW 7.4 HEC.

I've an authorization object ZAUTH created on characteristic 0COMPANY and activated this on infocube Z_COMPIC.

Then, i created a role ZROLE123 with a value "123" for above authorization object and restricted BEx query ZQUERY1 with a authorization variable created on characteristic 0COMPANY.

We've a user XXXXX assigned to role ZROLE123 yet when this user execute above query, all companies are coming up instead of just "123" data. Could someone guide on what i may have missed or how to analyze this issue.

User XXXXX also assigned to authorization object 0BI_ALL. (if i remove this from user, BEx query doesn't execute and SU53 shows "missing authorization 0BI_ALL").

Appreciate any insights.