How to activate an Authorization Trace in case of authorization Problems:
(something similar to Transaction ST01 in Netweaver ABAP)
Go to Hana System Administration, Trace Configuration:
Context Name is a description for this user-defined-trace
(something similar to Transaction ST01 in Netweaver ABAP)
Go to Hana System Administration, Trace Configuration:
User Specific Trace, select New Configuration (small Icon 'Create' upper right Corner of User-Specific Trace)
select Indexserver, select 'Show all components', select authorization
can be set to 'INFO' (this is optional, error is the default)
click on Finish
now trace is active
now Switch to the relevant user an produce the error
go to diagnosis Files and select the tracefile
example
[66898]{410859}[124/-1] 2015-08-14 12:32:42.216756 i Authorization SQLFacade.cpp(01353) : UserId(2637946) is not authorized to do SELECT on ObjectId(2,0,oid=141224)
[66898]{410859}[124/-1] 2015-08-14 12:32:42.217089 i Authorization SQLFacade.cpp(01750) :
schemas and objects in schemas :
SCHEMA-141016-_SYS_BI : {} , {SELECT}
TABLE-141224-BIMC_ALL_CUBES : {} , {SELECT}
[66898]{410859}[124/-1] 2015-08-14 12:32:42.217415 i Authorization query_check.cc(03287) : User AUTHTEST tried to execute 'select * from _SYS_BI.BIMC_ALL_CUBES WHERE CUBE_NAME = 'AN_M2MEVAL' AND CATALOG_NAME = 'swisscom.its.m2m''
SAP DBTech JDBC: [258]: insufficient privilege: insufficient privilege: Not authorized at ptime/query/checker/query_check.cc:3290
Source: scn.sap.com
No comments:
Post a Comment