BW aggregated authorization (colon :) issue

HI

I'm  new to BW authorization we have BW 7.0     SAP_BW     700     0019 system and we are facing issue in aggregation authorization

the scenario is we have 2 customized reports Daily_sales and Customer_Aging

and we have  authorization  ZPLANT_plant   Charact 0PLANT and EQ to the plant ID where the branch is located

We also have authorization ZPLANT_AGGR Charact 0PLANT and EQ :

The branch user required the 2 reports to be assigned to him

if we grant zplant_aggr to the branch user he can see other branches data (Unauthorized data)  in the report Daily_sales report if he keep the query input for plant empty.

if we don't grant the user zplant_aggr to the user the Customer_Aging will not work (No authorization)

Please help us what should we do in this case?

Thanks in advance.

Ameen