SAP HANA Predictive Analysis Library (PAL)

2.3 Security
This section provides detailed security information which can help administrator and architects answer some
common questions.
Role Assignment
For each AFL area, there are two roles. You must be assigned one of the roles to execute the functions in the
library. The roles for the PAL library are automatically created when the Application Function Library (AFL) is
installed. The role names are:
AFL__SYS_AFL_AFLPAL_EXECUTE
AFL__SYS_AFL_AFLPAL_EXECUTE_WITH_GRANT_OPTION
Note
There are 2 underscores between AFL and SYS.
To generate or drop PAL procedures, you also need the following role, which is created when SAP HANA is
installed:
AFLPM_CREATOR_ERASER_EXECUTE
Note
Once the above roles are automatically created, they cannot be dropped. In other words, even when an area
with all its objects is dropped and re-created during system startup, the user still keeps these roles
originally granted.
2.4 Checking PAL Installation
To confirm that the PAL functions were installed successfully, you can check the following three public views:
●
●
●
sys.afl_areas
sys.afl_packages
sys.afl_functions
These views are granted to the PUBLIC role and can be accessed by anyone.
To check the views, run the following SQL statements:
SELECT * FROM "SYS"."AFL_AREAS" WHERE AREA_NAME = 'AFLPAL';
SELECT * FROM "SYS"."AFL_PACKAGES" WHERE AREA_NAME = 'AFLPAL';
SELECT * FROM "SYS"."AFL_FUNCTIONS" WHERE AREA_NAME = 'AFLPAL';
8 P U B L I C
SAP HANA Predictive Analysis Library (PAL)
Getting Started with PAL