I tried to make a role for a user who could not change the queries in the query Designer. I used the common objects to make a role.
Business Explorer - Components S_RS_COMP activity 3 and 16
Business Explorer - Components: Enhancements to the Owner S_RS_COMP1activity 3 and 16
Administrator Workbench - InfoCube S_RS_ICUBE activity 3
Administrator Workbench - ODS Object S_RS_ODSO activity 3
And of course some transactions that should be needed. In BW 3.5 it was enough to say that a user could only have display functionality with these objects and activities included. In 2004S it is not working.
I traced it with st01 and I include authorization object obi_all, I quess this is giving me the problem, but without this object I'm not allowed to do anything.