SAP HANA Developer Guide - Get a Free Blog

The activated role is now visible in the Navigator view under Security Roles following the naming convention
package::role_name and can be granted to users as part of user provisioning.
Complete Role Definition Example
role ::
extends role sap.example::role1
extends catalog role "CATROLE1", "CATROLE2"
{
// system privileges
system privilege: BACKUP ADMIN, USER ADMIN;
// schema privileges
catalog schema "SYSTEM": SELECT;
schema sap.example:app1.schema: INSERT, UPDATE, DELETE;
// sql object privileges
// privileges on the same object may be split up in several lines
catalog sql object "SYSTEM"."TABLE2": SELECT;
catalog sql object "SYSTEM"."TABLE2": INSERT, UPDATE, DELETE;
// or a list of objects may get a list of privileges (object =
table, view, procedure, sequence)
// SELECT, DROP for all objects in list
sql object sap.example:VIEW1.attributeview,
sap.example:PROC1.procedure, sap.example:SEQ1.sequence: SELECT, DROP;
// additional INSERT, UPDATE for TABLE1
sql object sap.example:MY_VIEW.attributeview: DROP;
// analytic privileges
analytic privilege: sap.example:sp1.analyticprivilege,
sap.example:AP2.analyticprivilege;
catalog analytic privilege: "sp3";
}
Related Links
// design time privileges
package sap.example: REPO.EDIT_NATIVE_OBJECTS;
package sap.example, sap.co: REPO.READ;
application privilege: sap.example::Execute, sap.example::Save;
Setting Up Your Application [page 34]
In SAP HANA Extended Application Services (SAP HANA XS), the design-time artifacts that make up your
application are stored in the repository like files in a file system. You first choose a root folder for your
application-development activities, and within this folder you create additional subfolders to organize the
applications and the application content according to your own requirements.
The Application-Privileges File [page 59]
In SAP HANA Extended Application Services (SAP HANA XS), the application-privileges (.xssprivileges)
file can be used to create or define the authorization privileges required for access to an SAP HANA XS
application, for example, to start the application or to perform administrative actions on an application. These
privileges can be checked by an application at runtime.
SAP HANA Administration Guide
328
P U B L I C
© 2012 SAP AG. All rights reserved.
SAP HANA Developer Guide
Setting Up Roles and Authorizations