We have a calculation view (CA_VIEW) which one of our users (GIS) needs information from. They don't want all the information from the view, so we allowed them to create DB views on top of the CA_VIEW). For purposes of discussion: the views are: GIS_A, GIS_B, GIS_C - each database view is created by selecting a portion of the columns from the (CA_VIEW): Create VIEW "GIS"."GIS_A" ("AREA", "REGION") FROM "_SYS_BIC"."PKG/CA_VIEW" These views are created by SYSTEM and placed into the "GIS" schema: Now, after giving the proper permissions, "GIS" can see the view just fine: GRANTED ROLES i. CONTENT_ADMIN (from SYSTEM) ii. Public (Automatic – from SYS) SYSTEM PRIVILEGES i. CATALOG READ OBJECT PRIVILEGES i. _SYS_BIC schema (from _SYS_REPO) 1. EXECUTE 2. SELECT ii. PKG/CA_VIEW (from _SYS_REPO) 1. SELECT iii. GIS (Schema) (from SYS) 1. Create Any iv. GIS_A View (from SYSTEM) 1. Select The problem is we want to feed this view via data services to the "GIS" system. We use a common process ID for our DS jobs on HANA - P_BODS and I have given P_BODS the following privileges: GRANTED ROLES i. MONITORING (from SYSTEM) ii. Public (Automatic – from SYS) SYSTEM PRIVILEGE i. CATALOG READ (from System) OBJECT PRIVILEGES i. _SYS_BIC schema (from _SYS_REPO) 1. EXECUTE 2. SELECT ii. PKG/CA_VIEW (from _SYS_REPO) 1. SELECT iii. GIS Schema (from GIS) 1. Execute 2. Select iv. GIS_A View (SYSTEM) 1. Select Could not execute 'SELECT * FROM "APT_GIS"."APT_BoosterMetrics"' in 73 ms 660 µs . SAP DBTech JDBC: [2048]: column store error: [2950] user is not authorized. I did a SQL Trace on this user and here is the output: # begin PreparedStatement_close (thread 33934, con-id 443268) at 2016-02-08 13:08:54.882982 # con info [con-id 443268, tx-id 44, cl-pid 8600, cl-ip 10.189.22.52, user: P_BODS, schema: P_BODS] cursor_139698265450432_c43268.close() # end PreparedStatement_close (thread 33934, con-id 443268) at 2016-02-08 13:08:54.883001 # begin prepareStatement (thread 33934, con-id 443268) at 2016-02-08 13:09:00.071915 # con info [con-id 443268, tx-id 44, cl-pid 8600, cl-ip 10.189.22.52, user: P_BODS, schema: P_BODS] cursor_139710176709504_c43268 = con_c43268.cursor() # Statement_Exception call (thread 33934, con-id 443268) at 2016-02-08 13:09:00.093033 # con info [con-id 443268, tx-id 44, cl-pid 8600, cl-ip 10.189.22.52, user: P_BODS, schema: P_BODS] # ERROR QUERY: cursor_139710176709504_c43268.execute(''' SELECT * FROM "GIS"."GIS_A" ''') # begin rollback (thread 33934, con-id 443268) at 2016-02-08 13:09:00.093167 # con info [con-id 443268, tx-id 44, cl-pid 8600, cl-ip 10.189.22.52, user: P_BODS, schema: P_BODS] con_c43268.rollback() # end rollback (thread 33934, con-id 443268) at 2016-02-08 13:09:00.093237 # Error call (thread 33934, con-id 443268) at 2016-02-08 13:09:00.093282 # con info [con-id 443268, tx-id 44, cl-pid 8600, cl-ip 10.189.22.52, user: P_BODS, schema: P_BODS] # FAILURE OCCURRED AT: calculationEngine/ceController.cpp:418 # con info [con-id 443268, tx-id 44, cl-pid 8600, cl-ip 10.189.22.52, user: P_BODS, schema: P_BODS] # MESSAGE: column store error: [2950] user is not authorized : I CAN however, see the structure of the view under the P_BODS account as well as the SQL that forms the statement. Any help you can give a newbie is appreciated. (PostScript - Apologies in advance if I am posting this to the wrong thread, I've searched all over the web and SCN for an answer and am so far not finding one. I should also add that I have not have the ADMIN classes, so if this is basic ADMINISTRATION I apologize, we lost our HANA DBA recently...)
↧