cancel
Showing results for 
Search instead for 
Did you mean: 

PUBLIC role

Former Member
0 Kudos

Hi HANA security experts,

I have developed a procedure and view and used both of them in the Dynamic Analytic privilege. I was able to see only those values last week which are present from the output of the procedure. This week, there has been a difference in the roles assigned. PUBLIC role is assigned to the test user and I am able to see all data which defeats the very purpose of security. Since PUBLIC role will be added by default once a user is created, I would like to know how to override this role or is there any other way to add other roles that can override the public role. Or Will there be any issues if the public role is removed from the Test user.

Thanks in advance

Regards,

Vivek

Accepted Solutions (0)

Answers (1)

Answers (1)

muthuram_shanmugavel2
Contributor
0 Kudos

Hi Vivek,

PUBLIC is the default role which will be assigned to all the HANA DB users.

This role has the minimum privileges required to work with a database.

Assigning PUBLIC Role won't affect your User Analytic Privilege settings.


If Your Output is getting changed,

It might be because of User - Analytic Privilege setting changes.


Please check Whether your user have Analytic Privilege  "_SYS_BI_CP_ALL"

If this Analytic privilege assigned to your user, User defined AP won't work.


Best Regards,

Muthu

Former Member
0 Kudos

Hi Muthu,

Comparing last week and this week roles, I could see PUBLIC role and my POC related "TEST_COPA_POC" with SYS as grantor in object privileges. Only the Analytic privilege which was created earlier was added with _SYS_REPO as grantor. There is no "_SYS_BI_CP_ALL" added.

Regards,

Vivek

muthuram_shanmugavel2
Contributor
0 Kudos

Hi Vivek,

Then Please check the following two things.

1. Check Is there any Analytic Privilege is added to PUBLIC Role.

2. Check Your Column View settings - Whether Analytic privilege settings enabled?

Regards,

Muthu

Former Member
0 Kudos

Hi Muthu,

1. Analytic privilege added is - package name/privilege name - _SYS_REPO as Grantor

2. Before it wasn't enabled but now I have enabled the Analytic privilege settings in calculation view.

    Now I am getting insufficient authorization error when previewing data in calculation view.

Please suggest

Thanks,

Vivek

muthuram_shanmugavel2
Contributor
0 Kudos

Hi Vivek,

Usually in-sufficient  privilege error will come, If no analytic Privilege is added to that user.

Please ensure your user defined AP is added to your user.

If possible, put here screenshots, so I can understand well.

Regards,

Muthu