28.01.2013 Views

SAP HANA Developer Guide - Get a Free Blog

SAP HANA Developer Guide - Get a Free Blog

SAP HANA Developer Guide - Get a Free Blog

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

Example:<br />

role ::<br />

{<br />

catalog schema "MY_SCHEMA": SELECT;<br />

schema sap.example:MY_OTHER_SCHEMA.schema: SELECT;<br />

}<br />

e) Optional: Model package privileges using the keywords "package" as follows: package PACKAGE:<br />

PRIVILEGE;<br />

Example:<br />

role ::<br />

{<br />

package sap.example: REPO.READ;<br />

}<br />

f) Optional: Model analytic privileges using the keywords "analytic privilege" or "catalog analytic privilege"<br />

depending on whether you are referring to an activated analytic privilege or a runtime analytic privilege<br />

○ analytic privilege: :.analyticprivilege<br />

○ catalog analytic privilege: "analytic_priv_name";<br />

Example:<br />

role ::<br />

{<br />

analytic privilege: sap.example:sp1.analyticprivilege,<br />

sap.example:AP2.analyticprivilege;<br />

catalog analytic privilege: "sp3";<br />

}<br />

g) Optional: Model application privileges using the keyword "application privilege" as follows:<br />

application privilege: ;<br />

Example:<br />

role ::<br />

{<br />

application privilege: sap.example::Execute;<br />

}<br />

Note: Application privileges are implemented using the application-privileges file<br />

(.xsprivileges).<br />

7. From the main menu, choose File Save .<br />

The role is saved as an .hdbrole file. After it has been saved, the file is committed to the repository<br />

8. Activate the role by right-clicking it in the Project Explorer view and choosing Team Activate .<br />

Note: Any changes made to a previously activated version of the role in runtime will be reverted on<br />

activation. This is to ensure that the design-time version of a role in the repository and its activated<br />

runtime version contain the same privileges. It is therefore important that the activated runtime<br />

version of a role is not changed in runtime.<br />

<strong>SAP</strong> <strong>HANA</strong> <strong>Developer</strong> <strong>Guide</strong><br />

Setting Up Roles and Authorizations<br />

P U B L I C<br />

© 2012 <strong>SAP</strong> AG. All rights reserved. 327

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!