SAP HANA Developer Guide - Get a Free Blog

| |---2011...
|---subpackage1
| |---image.jpg
|---subpackage2
| |---subsubpackage
| | |---secret.txt
| |---script.xsjs
|---subpackage3
| |---internal.file
|---users
| |---123...
|---.xsapp
|---.xsaccess
|---index.html
The application-access file for the package apptest (and its subpackages) includes the following rules for
rewriting URLs used in client requests:
{
}
"rewrite_rules": [
{
"source": "/users/(\\d+)/",
"target": "/logic/users.xsjs?id=$1"
},
{
"source": "/posts/(\\d+)/(\\d+)/(\\d+)/",
"target": "/logic/posts.xsjs?year=$1&month=$2&day=$3"
}
]
Assuming we have the package structure and URL rewrite rules illustrated in the previous examples, the following
valid URLs would be exposed; bold URLs require authentication:
/sap/apptest/
/sap/apptest/index.html
/sap/apptest/logic/users.xsjs
/sap/apptest/logic/posts.xsjs
The rewriting of the following URLs would be allowed:
/sap/apptest/users/123/ ==> /sap/appTest/logic/users.xsjs?id=123
/sap/apptest/posts/2011/10/12/ ==> /sap/appTest/logic/posts.xsjs?
year=2011&month=10&day=12
4.4.6 Enabling Access to SAP HANA XS Application
Packages
The application-access file enables you to specify who or what is authorized to access the content exposed by the
application package and what content they are allowed to see.
You can use a set of keywords in the application-access file .xsaccess to specify if authentication is required to
enable access to package content, which data is exposed, and if rewrite rules are in place to hide target and
source URLs, for example, from users and search engines. You can also specify what, if any, level of authorization
is required for the package and whether SSL is mandatory for client connections.
SAP HANA Developer Guide
Setting Up Your Application
P U B L I C
© 2012 SAP AG. All rights reserved. 57