That would probably work. You could also add a flag to the user record saying if the person was an authoriser or not. Either way you'll need to write a query or a filter on the business object which lists only those items you want to see. A filter is often better if you spend the time getting it right as it works on all windows because it filters at the data level. A query can be put in the property of a list in the windows manager and filetrs at the window level, so different windows can be given queries to use.
OK so to look at writing filters/queries, you going to need to spend some time reading up on that. The upgrade guide on the documentation CD has some fairly heavy, but useful sections on writing queries which only show the analysts who happen to be in a group selected at runtime. Close to what you want and there are other filters that look at roles and so on. I guess there might be some documents up here on the community too.