cancel
Showing results for 
Search instead for 
Did you mean: 

Core Data Services and access control

Former Member
0 Kudos

Dear SCN-Community,

I´m trying to create some access controls for a CDS view. I think everything is defined correct and the created role is attached to the user but it´s not working (user is able to fetch all data from the view).

Anybody have some suggestions?

Accepted Solutions (0)

Answers (2)

Answers (2)

horst_keller
Product and Topic Expert
Product and Topic Expert
0 Kudos

ST05 should tell the truth. If there is a restriction for the user, it must be expressed in SQL there.Now you must check, if the restriction that you intend is really expressed in the conditions of the generated SQL.

In order to isolate the problem, maybe its a good idea to use Open SQL SELECT on the view in a little report to check its functionality and ST05.

horst_keller
Product and Topic Expert
Product and Topic Expert
0 Kudos

How do you check that the user is able to fetch all data?

Is s/he accessing the view with Open SQL (or SADL)? Only then, the implicit WHERE conditions are taken into account.

Did you use ST05 to check the SQL statement that is sent to the DBI from Open SQL when accesing your view? You should see the implicit WHERE conditions there.

Former Member
0 Kudos

I´m executing the CDS view via the Anaylsis for Office Client. I think I see the WHERE clause in ST05.