SAP HANA Developer Guide - Get a Free Blog

1. Create the application access file.
The application-access file must be a JSON-compliant file with the file suffix .xsaccess. Note that the
application-access file does not have a name before the dot (.); it only has the suffix .xsaccess.
Create a file called .xsaccess and place it in the package containing the application to which you want to
enable accesss. A basic .xsaccess file must, as the very least, contain a set of curly brackets, for example,
{}. Note that the .xsaccess file uses keyword-value pairs to set access rules; if a mandatory keyword-value
pair is not set, then the default value is assumed.
2. Enable application access to data.
You use the expose keyword to enable or disable access to content at a package or subpackage level.
{
}
"exposed" : true
3. Define the application authentication method.
You use the authentication keyword to define how to manage the authentication process for requests to
access package content, for example, SAP logon ticket, form-based logon, or a basic user name and
password .
{
}
"authentication" :
[
{ "method" : "Basic" }
]
4. Specify the application privileges.
Use the authorization keyword in the .xsaccess file to specify which authorization level is required by a user
for access to a particular application package. The authorization levels you can choose from are defined in
the .xsprivileges file, for example, "execute" for basic privileges or "admin" for administrative privileges
on the specified package.
{
}
"authorization":
[
"sap.xse.test::Execute",
"sap.xse.test::Admin"
]
5. Specify the client connection security.
You use the force_ssl keyword to enforce the use of secure HTTP (SSL/HTTPS) for client connections.
Browser requests that do not use SSL/HTTPS are refused and the 403 Forbidden page is displayed.
{
}
Note: You need to ensure the SAP Web Dispatcher is configured to accept and process HTTPS
requests.
"force_ssl" : true
6. Define the MIME mapping to be used for specific file extensions. (Optional)
58
P U B L I C
© 2012 SAP AG. All rights reserved.
SAP HANA Developer Guide
Setting Up Your Application