Strange behavior for Dynamic Analytical Privilege

[SabinLarranagaI]

Hi to everybody,

I and facing a problem with a Dynamic analytical privilege when one of the store procedures do not return any value and the user can see all the data instead of no data at all.

My AP have 3 attributes and all of them have a restriction by using a store procedure with operator “IN”.

Everything works fine when all the procedures returns values, then the user only can see the data based on the values returned by the stored procedures. The problem is when one of the store procedures do not return data and shows all data.

I am not sure if this is a normal behavior, but for me is not. I expect that if the SP do not return any value, means that the user cannot see any data.

Could someone have experience something similar? Could be something wrong or missing in the AP?

Example:

I have to users with the same analytical privilege.

The user “USER_1” can only see data related to purchase orders with statuses “010” and “030”. On a HANA table “TABLE_STATUS” is defined which status the user can view.

The store procedure query this table and retrieves the values from this table and returns values “010” and “030”.  The AP use the store procedure as a restriction with operator “IN”.

At the end the user “USER_1” can only see data with status “010” and “030”.

In the case of “USER_2”, there is no data maintained for this user on table “TABLE_STATUS”. When the stores procedure is executed, there is no data retrieved for this user. The problem is the “USER_2” can see all data without restrictions (Status 010, 020, 030, 040…).

Any ideas?

Thanks you

Sabin L.

[varma_narayana]

Hi Sabin,

Based on the symptoms of your issue, this is what I can think of..

I believe your model is a stacked calculation view. In that case you need to set the view property "Apply privileges" to "SQL Analytic privileges" in each of the used views in the model (not just the upper level calculation view). Then all these calculation views must be included in the analytic privilege.

I hope this will help you.

Cheers,

Varma

[SabinLarranagaI]

Hi Varma,

Yes, my model is the following:

Rigth now on the property "Apply security" of all calculation views (scripted or not) is in blank. With this the behaviour is the explained on the original post.

If I try your solution I don´t gent any results when I execute the application or directly the procedures.

Any thoughs?

Thanks in advance,

Sabin