Chapter 7. Hey! That's My Data! – Authorizations in SAP HANA

At this stage in the book, you have learned how to create a database schema, import data, or create tables using SQL, then use that data in attribute, analytic, and calculation views. At no point have we examined the fact that some of your users might not be allowed to have access to all the data in the system, or might have specific rights, maybe to create data but not to see the data that is currently in the system. We'll see concrete example of access restrictions on both objects and their content in this chapter.

SAP HANA provides several different layers of security from which you can benefit, and in this chapter we'll be looking at each of them. We'll examine how we can create each type of object, how they interact with each other, and how we can use them.

The authorization concept in SAP HANA is comprised of different notions:

• Roles

• SQL privileges

• Analytic privileges

• System privileges

• Package privileges

• Users

We will take a look...