Quantcast
Channel: SCN : Unanswered Discussions - SAP HANA and In-Memory Computing
Viewing all articles
Browse latest Browse all 4343

How to prevent viewing of all _SYS_BIC objects and also deleting of the same when Limited Set of Privilges given to my User

$
0
0

Hi Friends,

 

I have access to the SYSTEM(ADMIN) Account in the HANA Studio. From there I have Created Multiple Users Accounts:


TRAINEE_USER_1

TRAINEE_USER_2


with the following Privileges given:

 

1.SYSTEM PRIVILEGES :  CREATE SCENARIO,

                                             CREATE SCHEMA, CREATE STRUCTURED PRIVILEGE ,DATA ADMIN

 

 

2.OBJECT PRIVILEGES : _SYS_BI                        (SELECT,EXECUTE),

                                            _SYS_BIC                     (SELECT),

                                             REPOSITORY_REST  (EXECUTE),

                                            _SYS_REPO                 (EXECUTE),

          A created Schema say SCHEMA_1               (Create any,Select,Insert,Update,Delete,References)

 

 

3.PACKAGE PRIVILEGES: My Package say PACKAGE_1(All permissions for it given)

 

Now when I Login through TRAINEE_USER_1, inside _SYS_BIC Schema I do to see the following



1.I am able to see the ALL Columner VIEWS( of all Users) along with their "Definition" using Right Click.Columner Views created by me in my Alloted Package as well as all other  Columner Views created by others


2.I am able to see all(created by me as well as others)  the STORED_PROCEDUREs existing in  _SYS_BIC along with the Create Statement Syntax for them.(Most of these procedures are automatically by the creation of Calculation View in the Repository Package).


3 I am able to delete any Columner Views or STORED_PROCEDURES existing in _SYS_BIC (even though I have not given the DELETE permission on _SYS_BIC.)


So My Questions/Requirements are:


1.In HANA Is there any approach that the USER(TRAINEE_USER_1) can ONLY see the Corresponding Views and Stored Procedures in _SYS_BIC which got created from the views done  by him in his allocated Package(say PACKAGE_1).

 

 


2.How can we Prevent the other USERS(say TRAINEE_USER_2) from Deleting TRAINEE_USER_1 Columner Views or STORED PROCEDURES inside _SYS_BIC.

 

 

 

 

 

Regards

 

Nagarjuna


Viewing all articles
Browse latest Browse all 4343

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>