SAP Knowledge Base Article - Preview

3531818 - HANA authorization trace not written for analytic privilege troubleshooting

Symptom

You are attempting to troubleshoot a reported inconsistency in the results of a calculation view:

  • For the reporting business user, certain records are filtered out
  • Yet, for other database users (e.g. your administrative user) all records are visible

Since you have ruled out differences in client filtering being responsible, you suspect that there are differences in the analytic privileges assigned to each user.

To attempt to troubleshoot the distinction in analytic privileges between each user, you collect a user-specific database trace for trace component authorization. As per 1809199, you raise the authorization trace level to info:

  1. Enhance the trace level for trace component authorization to info:
    ALTER SYSTEM ALTER CONFIGURATION ('indexserver.ini','database') SET
    ('traceprofile_authorization', 'sql_user') = '<database_username>', 
    ('traceprofile_authorization', 'authorization') = 'info'
    WITH RECONFIGURE;

  2. Access the calculation view with both the problem DB user and DB user with access.

  3. Reset the trace configuration:
    ALTER SYSTEM ALTER CONFIGURATION ('indexserver.ini','database') UNSET ('traceprofile_authorization') WITH RECONFIGURE;

You notice that no authorization trace is written to the database diagnosis files.


Read more...

Environment

  • SAP HANA, platform edition
  • SAP HANA Studio

Product

SAP HANA, platform edition all versions

Keywords

STRUCTURED_PRIVILEGE, EFFECTIVE_STRUCTURED_PRIVILEGES , KBA , HAN-DB-SEC , SAP HANA Security & User Management , HAN-STD-DEV-MOD , SAP HANA Analytical Modeling , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.