Can You Add A Remote Source Object to A Repository Role?

[former_member212897]

We're trying to figure out how to provide users with access to Remote Sources and grant them {'Drop', 'Create Virtual Table', 'Remote Execution'}.

Currently our users have access to the Remote Sources with the above privileges but in order to give them to the users we have to add the Remote Source Objects through Hana Studio and it looks like we could also grant these through the Hana Web Site on the Security Management tab.

However, we are building a new role (.hdbrole) and we're able to add all the necessary objects with the exception of Remote Sources. Remote Sources don't even show up as an option in the drop down of avaiable objects when trying to add these through the Editor Workbench in Hana Studio, although, the Security Workbench in Hana Studio does have an option to filter the list by remote sources.

Were just trying to figure out if we can add the remote sources as objects to our role or do these have to be granted to each user in each environment?

For example When we are in the Web Editor creating an .hdbrole these are the only objects that are available (Note: Remote Source is not an option)

However, in the Security Workbench we have an option for Remote Source and when I search for them I can see all the remote sources.

Just trying to figure out if we can add these to a role or if they have to be added as catalog objects (I suppose I'm saying that correctly)

Thoughts?

[maik_toth5 · Accepted solution]

Hi Larry,

don't think that it is possible to modify the .hdbrole with REMOTE SOURCE privileges. However, it is possible to grant the priviliges to the hdbrole with the GRANT statement. Assumed the one who executes the grant is the owner or delegate of the remote source.

"Check for the owner of the remote source 

SELECT * FROM OWNERSHIP WHERE OBJECT_TYPE = 'SOURCE';

2. GRANT DROP, REMOTE EXECUTEON REMOTE SOURCE <your SDA Connection> TO"<your hdbrole>"; 

" Execute as Owner of the SDA Connection or Grant the relevant Privileges to a substitute user, eg dedictaed tech user for SDA connections.

This applies to XSC, don't know if XSA has more options.

Regards

Maik

[former_member212897 · Accepted solution]

Maik,

Worked Perfectly, thank you so much!!

We are currently implementing Hana and learning everything on the fly the hard way and this just made our day! You put smiles on at least 2 people today.

As we're new to this I'll point out a few things that we did just in case someone else is ever in the same boat. We added the privilege to Create Virtual Table along with the 2 above and we also had to fully type out the path to your .hdbrole.

GRANT DROP, CREATE VIRTUAL TABLE, REMOTE EXECUTE ON REMOTE SOURCE <REMOTE SOURCE NAME> TO "COMPANY_NAME.Security.Common.Roles::Developer";

Thanks again Maik!!

[maik_toth5 · Accepted solution]

Dear Larry,

happy that it worked out for you.

Enjoy the HANA world 😉

Cheers
Maik