Skip to Content
avatar image
Former Member

How to restrict users to all the views of a single package

Hello

We have a requirement to restrict a user to do data preview for all the views (attribute, analytic and calculation) within one specific package. He should be able to do that for all the views in that package and there is no associated attributes restriction (hence no value restriction). We do not want the user to see views in other packages. We created an analytic privilege and chose all the views in that package, saved, activated and assigned it to our test user. However we still get authorization errors:

SAP DBTech JDBC: [256]: sql processing error: createMaterializedSearchResult failed error SQL: insufficient privilege: Not authorized

SAP DBTech JDBC: [258]: insufficient privilege: Not authorized

The above errors are fixed if we provide the user SELECT privilege over schema _SYS_BIC and _SYS_BI. However we do not want to provide him with access to those schemas as he would be able to get access to all run-time objects out of his package.

We would appreciate a solution

Thanks

Reza

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

3 Answers

  • Jan 25, 2013 at 04:34 PM

    Rezza,

    The Analytical privilidge is for data level security within a table or analytical / attribute view - not table levelĀ  security.

    What you need to do is to revoke the package level select for the particular user.

    Hope this helps.

    Regards,

    Rama

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Jan 26, 2013 at 11:08 PM

    Dear Reza,

    I believe you can achieve this using Analytic Privilege. More info on how to secure your views can be found in the link http://www.saphana.com/docs/DOC-2291

    Rgds,

    Mat.

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Jan 28, 2013 at 05:52 PM

    HI Reza,

    Analytic privilege would be for field level restrcition in the view, you will have to create a package privilege to restrict all module (attr, analy and cal module)  from certain package. Hope this input will help you.

    Add comment
    10|10000 characters needed characters exceeded