SAP Knowledge Base Article - Preview

2210758 - No error recorded when revoking a role from a user

Symptom

You want to use a user (SYSTEM below) to revoke a role (test_role below) from another user (DEF below).
The user (SYSTEM) is not the owner of the role and has no grant/revoke authorization of the role.
Capture1.JPG

Capture2.JPG

You cannot revoke the role from the user in the User Editor because the Delete button is grey.
Capture3.JPG

However you can execute the SQL command below without any error.
But the role is not really revoked from the user (DEF).
Capture4.JPG

Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental.


Read more...

Environment

HANA 1.0 all revisions

Product

SAP HANA 1.0, platform edition

Keywords

ROLE ADMIN, delete, grantor,  grantee, role owner, REVOKE , KBA , HAN-DB-SEC , SAP HANA Security & User Management , How To

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.