SAP HANA Developer Guide - Get a Free Blog

The SAP HANA modeler automatically implements this specification if you do not select either an attribute
restriction or a value filter. However, if you create the analytic privilege using SQL, you must make the
specification manually.
Example 1:
Example 2:
Logical Combination of Restrictions and Filter Conditions
The result of user queries on restricted views is filtered according to the conditions specified by the analytic
privileges granted to the user as follows:
● Multiple analytic privileges are combined with the logical operator OR.
● Within one analytic privilege, all attribute restrictions are combined with the logical operator AND.
● Within one attribute restriction, all value filters on the attribute are combined with the logical operator OR.
You create two analytic privileges AP1 and AP2. AP1 has the following attribute restrictions:
● Restriction R11 restricting the attribute Year with the value filters (EQ 2006) and (BT 2008,
2010)
● Restriction R12 restricting the attribute Country with the value filter (IN ("USA", "Germany"))
Given that multiple value filters are combined with the logical operator OR and multiple attribute
restrictions are combined with the logical operator AND, AP1 generates the condition:
((Year = 2006) OR (Year BT 2008 and 2010)) AND (Country IN ("USA",
"Germany"))
AP2 has the following restriction:
Restriction R21 restricting the attribute Country with the value filter (EQ "France")
AP2 generates the condition:
(Country = "France")
Any query of a user who has been granted both AP1 and AP2 will therefore be appended with the following
WHERE clause:
SAP HANA Developer Guide
Setting Up Roles and Authorizations
P U B L I C
© 2012 SAP AG. All rights reserved. 335