SAP HANA Developer Guide - Get a Free Blog

Now when a database user requests access to a secured view containing product information, the data returned
will be filtered according to the following condition:
(product LIKE "ELECTRO*" OR product IN
(AUTHORIZATION.DETERMINE_AUTHORIZED_PRODUCT_FOR_USER())
12.4.5 Creating Analytic Privileges
● To create, activate and drop the privilege you have system privileges CREATE STRUCTURED PRIVILEGE and
STRUCTUREDPRIVILEGE ADMIN.
● Make sure that both CREATE STRUCTURED PRIVILEGE and STRUCTUREDPRIVILEGE ADMIN are correctly
owned by SYS_REPO user.
● To activate and redeploy analytic privileges in the Modeler, a database user requires corresponding repository
privileges, namely REPO.EDIT_NATIVE_OBJECTS and REPO.ACTIVATE_NATIVE_OBJECTS
You apply analytic privileges when business users access values with certain combinations of dimension
attributes. You can use analytic privileges to partition data among various users sharing the same data
foundation. You can define restrictions for a selected group of models or apply them to all content models across
packages.
After activation, an analytic privilege needs to be assigned to a user before taking any effect. The user views the
filtered data based on the restrictions defined in the analytic privilege. If no analytic privilege applicable for models
is assigned to a user, he cannot access the model. If a user is assigned to multiple analytic privileges, the
privileges are combined with OR conditions.
Remember: In addition to the analytic privileges, a user needs SQL Select privileges on the generated
column views.
The generated column views adhere to the following naming conventions:
For a view “MyView” in package “p1.p2” (i.e. subpackage p2 of package p1) the generated column view lies in
schema _SYS_BIC and is named “_SYS_BIC”.”p1.p2/MyView”. Ensure that the users who are allowed to see the
view have select privileges on the view (or the entire schema _SYS_BIC).
Note: Multiple restrictions applied on the same column are combined by OR. However, restrictions across
several columns are always combined by AND.
1. Set Parameters for the Analytic Privilege
a) In the Modeler perspective, expand the system node from the Navigator panel.
b) Expand the Content node.
c) Select the required package.
d) From the context menu, choose New Analytic Privilege .
1. Enter a name and description for the analytic privilege, and choose Next.
2. Select the information models that you want to use for applying restrictions.
3. Choose Finish.
SAP HANA Developer Guide
Setting Up Roles and Authorizations
Tip: You can choose to add more models in the editor pane.
P U B L I C
© 2012 SAP AG. All rights reserved. 341