A Starter's question on Reporting security

I am a newbie on security. We need to restrict users by hierarchy nodes and followed the relevant white paper to set it up. However, the role only works when the hierarchy is used in the query. If no hierarchy is active, it returns saying no authorization.

According to the white paper, the role should work even if the infoobject itselt is not used in the query. So what is missing? Appreciate any help. Thanks.