SAP HANA Developer Guide - Get a Free Blog

1. If you have not already done so, create a root package for your new application, for example,
MyApplication.
2. If you have not already done so, create an application descriptor for your new application and place it in the
root package you created in the previous step.
The application descriptor is the core file that you use to describe an application's availability within SAP
HANA Extended Application Services. The application-descriptor file has no contents and no name; it only has
the file extension .xsapp.
Note: For backward compatibility, content is allowed in the .xsapp file but ignored.
3. If you have not already done so, create an application-access file for your new application and place it in the
package to which you want to grant access.
The application-access file does not have a name; it only has the file extension .xsaccess. The contents of
the .xsaccess file must be formatted according to JavaScript Object Notation (JSON) rules and associated
with the package it belongs to. The rules defined in the .xsaccess file apply to the package it resides in as
well as any subpackages lower in the package hierarchy.
Note:
Use the authorization keyword in the .xsaccess file to specify which authorization level is to be
granted to a particular application package. The authorization levels you can choose from are defined
in the application-privileges file (.xsprivileges), for example, "execute" for basic privileges, or
"admin" for administrative privileges on the specified package.
4. Create the application-privileges file.
The application-privileges file does not have a name; it only has the file extension .xsprivileges. The
contents of the .xsprivileges file must be formatted according to JavaScript Object Notation (JSON)
rules. Multiple .xsprivileges files are allowed, but only at different levels in the package hierarchy; you
cannot place two .privileges files in the same application package. The privileges defined in
a .xsprivileges file are bound to the package to which the file belongs and can only be applied to this
package and its subpackages.
5. Define the application privileges.
Inside the .xsprivileges file, a privilege is defined for an application package by specifying an entry name
with an optional description. This entry name is then automatically prefixed with the package name to form
the unique privilege name, for example, sap.hana::Execute. The unique privilege name can be used in
multiple .xsprivileges files in different packages, since they are all different privileges.
Note: The .xsprivileges file lists the authorization levels available for granting to an application
package; the .xsaccess file defines which authorization level is assigned to which application
package.
{
"privileges" :
[
{ "name" : "Execute", "description" : "Basic execution
privilege" },
{ "name" : "Admin", "description" : "Adminstration
privilege" },
SAP HANA Developer Guide
Setting Up Your Application
P U B L I C
© 2012 SAP AG. All rights reserved. 61