Accessing .xsodata: column store error: [2950] user is not authorized

[Former Member]

Hi,

I have two tables, joined in a calc view which I expose via .xsodata. As the system user, I can access this fine.

I wanted a restricted user, so I created a .xsprivileges file:

{

"privileges" :

[

  { "name" : "Execute", "description" : "Basic execution privilege" },

  { "name" : "Admin", "description" : "Administration privilege" }

]

}

And a .hdbrole file:

role demo::demo {

  application privilege: demo::Execute;

catalog schema "SAPSID": SELECT;

package eivdemo: REPO.READ;

  sql object demo.data:test.calculationview: SELECT;

}

I create a restricted user, assign the role to him and get the following error:

[73295]{300305}[12/-1] 2015-02-11 21:49:11.093732 e RemoteQuery      RemoteQueryExecution.cc(01360) : unexpected excpetion at remote: code=2048(ltt=false), error=column store error: [2950] user is not authorized :

Any ideas what I did wrong? Thanks!

John

[Former Member · Accepted solution]

Hi John,

I think you may need to create an analytic privilege in the repo and include it in your .hdbrole.

Best regards,

Wenjun

[Former Member · Accepted solution]

Thanks for the reply!

I see that there is a new default for Calc Views, which is Analytic Privileges are applied by default. I disabled that and this now works.

You're right that creating an Analytic Privilege would also solve the problem, but I don't want to restrict access to the data within the view.