In the end we realized that the DEFINER mode for the procedure is the way to go. It's important to remember that the DEFINER is the _SYS_REPO user. So, one needs to make sure that the _SYS_REPO user has the authorization/anayltic privilges to read the data/views.
No authorizations on the views are then needed for the end user.