SAP HANA Developer Guide - Get a Free Blog

privileges defined in a .xsprivileges file are bound to the package to which the .xsprivileges file belongs
and can only be used in this package and its subpackages.
Inside the .xsprivileges file, a privilege is defined by specifying an entry name with an optional description.
This entry name is then automatically prefixed with the package name to form the unique privilege name, for
example, sap.hana::Execute.
As an application privilege is created during activation of an .xsprivileges file, the only user who has the
privilege by default is the _SYS_REPO user. To grant or revoke the privilege to (or from) other users you must use
the GRANT_APPLICATION_PRIVILEGE or REVOKE_APPLICATION_PRIVILEGE procedure in the _SYS_REPO
schema.
Note: The .xsprivileges file lists the authorization levels that are available for access to an application
package; the .xsaccess file defines which authorization level is assigned to which application package.
The SAP HANA XS Application-Privileges File
The following example shows the composition and structure of a basic SAP HANA XS application-
privileges file.
{
"privileges" :
[
{ "name" : "Execute", "description" : "Basic execution
privilege" },
{ "name" : "Admin", "description" : "Administration
privilege" },
]
}
In the example above, if the application-privileges file is located in the application package
sap.hana.xse, then the following privileges are created:
● sap.hana.xse::Execute
● sap.hana.xse::Admin
Note: The privileges defined apply to the package where the .xsprivileges file is located as well
as any packages further down the package hierarchy unless an additional .xsprivileges file is
present, for example, in a subpackage. The privileges do not apply to packages that are not in the
specified package path, for example, sap.hana.app1.
For the example above, the following Grant procedure would be used:
call
"_SYS_REPO"."GRANT_APPLICATION_PRIVILEGE"('"sap.hana.xse::Execute"',
'')
4.4.8 Create an SAP HANA XS Application Privileges File
The application-privileges (.xssprivileges) file can be used to grant authorization levels for an application, for
example, to start the application or perform administrative actions on an application.
60
P U B L I C
© 2012 SAP AG. All rights reserved.
SAP HANA Developer Guide
Setting Up Your Application