Someone necro-posted this thread without adding any useful infos, which is why it appeared again...
Note that since then there is also object S_TABU_NAM and in RSA1 the analysis authorizations are also checked for access to the data.
Cheers,
Julius