Question about authorization

In our company we use the Organization Key to define the authorization. But a user can't use Query to display the employee's data in the period in which the employee's Org Key is included in the user's authorization, on the other hand the user can display that employee's data by PA20.

Example, a emloyee's Org Key is 10000000 in period 2006.01.01 - 2006.12.31, 20000000 in period 2007.01.01 - 9999.12.31. A user has the authorization for Org key 10*. When the user run the Query display the data in period 2006.01.01 - 2006.12.31, the employee mentioned above can't be displayed. But the user can use PA20 to display the employee's data in period 2006.01.01 - 2006.12.31.

So I want the Query do the same work as PA20, Can anybody help me to solve this problem?