Failure by creating a calcualtion view

[Former Member]

Hi all,

i try to activate a calculation view and get the following error:

MDXRuntime: Internal deployment of object failed: Internal Error:Create Scenario: failed aCalcEngine.createScenario(): The following errors occured: user is not authorized (2950)nnprinting XML <?xml version="1.0" encoding="UTF-8" standalone="no"?><cubeSchema defaultLanguage="EN" defaultSchema="_SYS_BIC" operation="createCalculationScenario" version="3"><calculationScenario name="tutorials.java/CALC_GRAPHIC" schema="_SYS_BIC"><dataSources><tableDataSource name="TEILNEHMER_A" schema="TUTORIALS" table="TEILNEHMER_A"><attributes><allAttribute /></attributes></tableDataSource><tableDataSource name="TEILNEHMER_B" schema="TUTORIALS" table="TEILNEHMER_B"><attributes><allAttribute /></attributes></tableDataSource></dataSources><calculationViews><union name="Union_1" ><viewAttributes><viewAttribute ignoreFromInputsFlag="false" isVisible="true" name="TEILNEHMERNUMMER" /><viewAttribute ignoreFromInputsFlag="false" isVisible="true" name="VORNAME" /><viewAttribute ignoreFromInputsFlag="false" isVisible="true" name="NACHNAME" /><viewAttribute ignoreFromInputsFlag="false" isVisible="true" name="GEBURTSDATUM" /><viewAttribute ignoreFromInputsFlag="false" isVisible="true" name="FIRMA" /></viewAttributes><inputs><input name="TEILNEHMER_A"><mapping source="TEILNEHMERNUMMER" target="TEILNEHMERNUMMER"/><mapping source="VORNAME" target="VORNAME"/><mapping source="NACHNAME" target="NACHNAME"/><mapping source="GEBURTSDATUM" target="GEBURTSDATUM"/><mapping source="FIRMA" target="FIRMA"/></input><input name="TEILNEHMER_B"><mapping source="TEILNEHMERNUMMER" target="TEILNEHMERNUMMER"/><mapping source="VORNAME" target="VORNAME"/><mapping source="NACHNAME" target="NACHNAME"/><mapping source="GEBURTSDATUM" target="GEBURTSDATUM"/><mapping source="FIRMA" target="FIRMA"/></input></inputs></union><projection name="finalProjection" defaultViewFlag="true"><inputs><input name="Union_1"><mapping source="TEILNEHMERNUMMER" target="TEILNEHMERNUMMER"/><mapping source="VORNAME" target="VORNAME"/><mapping source="NACHNAME" target="NACHNAME"/><mapping source="GEBURTSDATUM" target="GEBURTSDATUM"/><mapping source="FIRMA" target="FIRMA"/></input></inputs><viewAttributes><viewAttribute name="TEILNEHMERNUMMER"/><viewAttribute name="VORNAME"/><viewAttribute name="NACHNAME"/><viewAttribute name="GEBURTSDATUM"/><viewAttribute name="FIRMA"/></viewAttributes></projection></calculationViews></calculationScenario></cubeSchema>nVersion: 62n

I think i need some additional privileges to create a calculation view... I don't work with SYSTEM user.

I give the following rights to my user:

SQL PRIVILEGES:

- SCHEMA _SYS_BIC: INSERT

- SCHEMA _SYS_BI: INSERT

-SCHEMA _SYS_REPR: SELECT

SYSTEM PRIVILEGES: CREATE SCENARIO

What do i need more?

Best regards

Thorsten Füg

[Former Member · Accepted solution]

Hi Thorsten,

Have you given read access to your schema to _SYS_REPO user?

grant select on schema <SCHEMA> to _SYS_REPO with grant option;

Thanks,

Anooj

[Former Member]

I just wanted to add that you can dig a little deeper into the indexserver_*.trc files under the diagnosis tab if you are having some issues. I forgot that I was trying to have my calculation view reference tables in two different schemas, thus I had to have my user give _SYS_REPO access to both schemas:

[16674]{448738}[113/232191] 2014-05-02 14:46:56.091398 d CalcEngine       ceAuthorizationCheck.cpp(01379) : AuthorizationCheckHandler::explain:
- User object for '_SYS_REPO' successfully received
- NOT authorized on 'SALES_FIGURES'
- Authorized on 'REMOTE_B3Y_SALES_FIGURES'
- no authorization required for 'Union_1'
- no authorization required for 'finalAggregation'

With the above log, I could see that I had to grant select to "SALES_FIGURES" which was under a different schema than "REMOTE_B3Y_SALES_FIGURES".

[Former Member]

Thanks to Anooj and Neha.

after your steps i can activate the calculation view without any errors

I do the same steps with my own schema before i do the post in this forum...

but i didn't remember and miss this step by the new schema i use.

Can you explain me short, why I have to do thsi steps manuelly and why I can't do it by gui like setting the user privileges?

Is it nessesary to do this steps when replicate tables from BW and the schema will create automatically?

Thanks a lot

Regards

Thorsten

[Former Member]

Hi Thorsten,

Please refer to section 4.1.4.6 in the Security Guide here - http://help.sap.com/hana/hana1_sec_en.pdf

This explains what "_SYS_REPO" repository user is and why this specific authorisation is necessary.

Thanks,

Anooj

[former_member182277]

Hello,

Please perform the following steps:

1. Catalog > Users > _sys_repo > open definition

2. Goto SQL Privieldge tab.

3. Add the schema name with select n execute options.

4. Save it.

5. now try to actvate the view again.

you can also you the folowign SQL for the same:

grant select on schema <SCHEMA> to _SYS_REPO with grant option;

Regards,

neha