Data Access control BI and BOBJ ?

Hi Experts,

I have a question.I created finance role and assigned to a user Test_FI and that role only has access to Finance Cubes.I exported the role and assigned to folder "Corportae Reports" in Business objects .The folder contains all reports including finance,Supplkychain,HR.When the user test_FI access the lauchpad and tries to access SCM reports and execute he is getting the output ,but i ahven't assigned the SCM roles or related cubes.My question is

1.I belive the data is controlled in BI (roles) and not in BO ,though access given to SCM reports in BO

The other option is to seggregate the reports which i know ,but i like to understand the fundamental.

Regards

sarav