Skip to Content
0

SAP HANA XSA SPS 12.1: ETL Access to HDI Container: _SYS_REPO is missing privileges

Oct 23, 2016 at 09:35 AM

409

avatar image

Hi,

I struggling with this error, when I execute a flowgraph task:

Error while activating /development/diraschk/dev/flowgraph/test2Norg.hdbflowgraph:
[development.diraschk.dev.flowgraph:test2Norg.hdbflowgraph] User _SYS_REPO is missing privileges: INSERT,UPDATE,DELETE for OBJECT "Q2EAA4AOJFAUXW8Y_CSP_HDI_CONTAINER"."CSP.db.data::cspNO.cds.NORG".

I gave the _SYS_REPO the right privileges, I can see it.

I tried to execute the task with WebIDE and with studio, but still the same issue.

I did exactly the same what I did in the past:

https://archive.sap.com/discussions/thread/3955971

Thanks!

norg.png (36.8 kB)
10 |10000 characters needed characters left characters exceeded
* Please Login or Register to Answer, Follow or Comment.

6 Answers

Michael Healy
Oct 23, 2016 at 11:02 AM
0

Since the _SYS_REPO is a technical user, have you tried creating a hdb role and within this role grant the SYS_REPO the privileges you specified above, then grant your user this role. This should work.

Share
10 |10000 characters needed characters left characters exceeded
Dirk Raschke Oct 23, 2016 at 12:40 PM
0

Hi Michael,

yes, this is what I did.

This is exactly the same what I've described in this link above, and it worked for me in the past.

The other role (which I created in the past) is still working within an other project/container on the same way.

Thanks for your help!

Share
10 |10000 characters needed characters left characters exceeded
Michael Healy
Oct 23, 2016 at 09:31 PM
0

Hi Dirk.

Ok. Have you created an incident with SAP for it? If so let me know the #.

Cheers

Share
10 |10000 characters needed characters left characters exceeded
Dirk Raschke Oct 24, 2016 at 07:43 AM
0

Hi Michael,

I did it: 380517 / 2016 SAP HANA XSA SPS 12.1: ETL Access to HDI Container: _SYS_REPO is missing privileges

Thanks!

Share
10 |10000 characters needed characters left characters exceeded
Dirk Raschke Oct 24, 2016 at 08:05 AM
0

And really, I'm wondering why I can't find this question below the SAP HANA questions. And I'm more wondering how you (Michael) could find it. ;)

I have also an other question with the same tags, and I can see this question within the question queue.

https://answers.sap.com/questions/metadata/23925/sap-hana.html

https://answers.sap.com/questions/40275/sap-hana-looking-for-a-abap-table-converter-to-hdb.html

Share
10 |10000 characters needed characters left characters exceeded
Timo Wagner
Oct 25, 2016 at 02:24 PM
0

Hi Dirk,

which schema has been set as Authoring schema of the flowgraph?

As in your case the target is a Data Sink (correct?) it can be set to any schema for which the _sys_repo user has execute permission.

Could you please also try to add the grant option to the object permissions that you've set for the cds table?

Show 2 Share
10 |10000 characters needed characters left characters exceeded

Hi Timo,

thanks for your help!

The target schema is the container schema.

Yes, I get this error if I use "Data Sink". If I use "Template Table" than it works.

And_sys_rep has the right permisson received.

"Could you please also try to add the grant option to the object permissions that you've set for the cds table?"

Tried it, but it doesn't work, there are new problems. (Look at this sample code. Maybe I did something wrong)

And in my other project, I don't need to do it. It works without grant option.

privileges --> privileges_with_grant_option

{
	"role": {
		"name": "CSP.db.roles::cdsTablesRoleCSPNO",
		"schema_privileges": [{
		   "privileges": ["ALTER","CREATE ANY","EXECUTE","UPDATE", "DROP", "REFERENCES", "INDEX", "DELETE", "INSERT","SELECT","SELECT METADATA", "SELECT CDS METADATA"]
		}],		
		"object_privileges": [{
				"name": "CSP.db.data::cspNO.cds.NORG",
				"type": "TABLE",
				"privileges_with_grant_option": ["SELECT", "UPDATE", "DROP", "REFERENCES", "INDEX", "DELETE", "INSERT", "ALTER", "TRIGGER"]
			}
		]
	}
}

GRANT "Q2EAA4AOJFAUXW8Y_CSP_HDI_CONTAINER"."CSP.db.roles::cdsTablesRoleCSPNO" to _SYS_REPO;

Thanks for helping me!

0

Hi Timo,

I think I found the reason, why sometimes I get this issue "missing _SYS_REPO" and sometimes not for my flowgraph task. It has something to do with the task-mode. The issue comes up, if I use the "Batch Task".

Some of my working tasks are using the "Procedure" Task Mode and I don't get this error.

But if I try to create a new own than I do have this issue, because the "Batch Task" is initialize set.

Do you know, what I need to do to get the right privileges for the "Batch Task"-Mode?

0