Quantcast
Channel: SCN : Unanswered Discussions - SAP HANA and In-Memory Computing
Viewing all articles
Browse latest Browse all 4343

SAP HANA security issue: SAP DBTech JDBC: [258]

$
0
0

Hello experts,

 

I am trying SAP HANA security features by playing out with a test user (MYTESTUSER) I've previously created. This is the permissions detail I've granted to the mentioned user:

 

Granted Roles:

PUBLIC

Object Privileges:

_SYS_BIC : SELECT

_SYS_REPO : EXECUTE, SELECT

REPOSITORY_REST (SYS): EXECUTE

MYSCHEMA : SELECT (Contains source tables for views)

Package Privileges:

TEST.MYTEST (Package containing my views)

Analytic Privileges:

AP_MYTEST : Contains all my views and a couple restrictions over an attribute.

 

What do I expect?: when logging on as MYTESTUSER it should be able to deploy the different folders in SAP HANA Studio, dive into "Content" folder, and even more: reach the package TEST.MYTEST, once there by selecting "Calculation Views" folder then being able to open CV_MYTEST calc view (which was already added into AP_MYTEST shown above).

 

What happens as is?: Running as MYTESTUSER I am able to reach the calc view, when opened it is able for view only (its design). When pushing over the button "Open in Data Preview Editor" it trhows me the error:

 

Cannot get the data provider outline

SAP DBTech JDBC: [258]: insufficient privilege: insufficient privilege: Not authorized at ptime/query/checker/query_check.cc:2418

 

What is expected?: Running as MYTESTUSER "Open in Data Preview Editor" feature must return and show adequate data from calculated view.

 

In consequence:

  • What does this error ("Not authorized at ptime/query/checker/query_check.cc:2418") specifically means and how to start addressing it?
  • I'm unable to determine what is crashing or in what point it doesn't work. Any clues?
  • I've also realized that there's no way out to perform some kind of trace (at least in an easy-known-fashion). Could you also advice? it would be quite important to be able to detect what are specifically the missing authorizations for a performed action. (kinda SU53 in SAP)


Any clues or advices are welcome. Thanks a lot in advance,


Bernardo



Viewing all articles
Browse latest Browse all 4343

Trending Articles