Analysis authorizations and planning functions

Dear experts!

I want that my users can not display certain data (e.g. a version) in a query, but they should be able to read this data in a planning function (e.g. formula, which reads this version to copy it to another version).

Is there a way to tailor the authorizations to reach the above described scenario?

By the way there seems to be no way to trace analysis authorizations used in planning functions.

Any help would be appreciated.

Cheers Michael