Request execution failed due to missing privileges in accessing SHINE demo app

[Former Member]

Hi  guys,

I am a newbie to HANA. I am now playing with SHINE demo application to learn HANA.

I created an  instance in HANA cloud, and register a trial user. 

I  configured the HANA studio environment, made it connected to the HANA cloud, and imported the SHINE demo app into the HANA studio.

All  configuration are done except the roles needed for the end user to access the SHINE demo app.

I add the role to the user using sql: call "HCP"."HCP_GRANT_ROLE_TO_USER" ('i076318trial.opensap.shine.data::model_admin','i076318')

and aftering excuting this sql sentence, it shows success in the log.

However, when I access the SHINE app from front end, it shows the "Request execution failed due to missing privileges"  error

.

the following are the screen shots in case you need more information.

[Former Member]

Hi Torren,

Which version of SHINE did you use? Usually there are two roles in SHINE, sap.hana.democontent.epm.roles::User and sap.hana.democontent.epm.roles::Admin

http://help.sap.com/hana/SAP_HANA_Interactive_Education_SHINE_en.pdf

Best regards,

Wenjun

[Former Member]

Hi Wenjun,

I think the shine version is SPS6,  and the role need to be assigned is <your package>.shine.data::model_access.

I tried to assign the roles you mentioned above:

sap.hana.democontent.epm.roles::User and sap.hana.democontent.epm.roles::Admin

but I did not find them.

[i035588]

Dear Torren,

you can follow this blog for the same.

http://scn.sap.com/community/developer-center/cloud-platform/blog/2014/03/20/do-a-click-and-try-samp...

i hope this will solve your issue . Now you have new version of SHINE available  on trial.

Regards

Arun

[Former Member]

Dear Arun, I also tried to follow that great post, but even for the basic hello_world, I have issues with the basic grants.

I call this for my repository

call "HCP"."HCP_GRANT_ROLE_TO_USER" ('p1941382001trial.fmtrainingxs.samples.helloworld::helloworld_user', 'p1941382001')

but I get this:

Could not execute 'call "HCP"."HCP_GRANT_ROLE_TO_USER" ...' in 20.899 seconds .

[129]: transaction rolled back by an internal error:  [129] "HCP"."HCP_GRANT_ROLE_TO_USER": line 14 col 11 (at pos 849): [129] (range 3): transaction rolled back by an internal error: transaction rolled back by an internal error:  [129] "HCP"."SYNCHRONIZE_HCP_ROLES": line 22 col 12 (at pos 1518): [129] (range 3): transaction rolled back by an internal error: transaction rolled back by an internal error:  [129] "HCP"."SYNCHRONIZE_HCP_ROLE": line 43 col 4 (at pos 2768): [129] (range 3): transaction rolled back by an internal error: user-defined error:  [10001] "HCP"."DEPENDENCY_VALIDATOR": line 20 col 8 (at pos 1127): [10001] (range 3) user-defined error exception: Using schema EPMSAMPLEDATA is not allowed. Schema level privilege is allowed only for you dev schema!

Any suggestions?

Thanks!

[Former Member]

A quick update, I was having a similar issue and Dimitar helped to identify it. It seems that under my user, I had another package with a test role that was interfering

HCP_GRANT_ROLE_TO_USER procedure first synchronizes all hdbrole files in your account that you have already granted to users. Please, check all hdbrole files under your account package, for containing EPMSAPLEDATA grants, and remove it.

I hope this helps anyone coming across this problem.

Thanks!

[Robert_Russell]

Hi Francisco,

Have to thank you for posting your update, helped me out and resolved a problem I had with overlapping roles. I couldn't understand the error as I had it working but then failed with what I thought were unrelated changes but the contents of roles did actually overlap and interfere.

Cheers

Robert