3707398 - HANA authorization behavior related to schema and table-level privileges.

• Granting SELECT privilege at the schema level provides access to all tables within the schema, including future tables.
• Attempting to restrict access to specific tables by executing REVOKE SELECT at the table level does not override the schema-level SELECT privilege.
• Users retain SELECT access to tables even after REVOKE SELECT is executed at the table level.

SAP HANA Security & User Management

sap hana, schema-level privileges, table-level revoke, additive privileges, authorization behavior, select privilege, schema grant, object revoke, deny mechanism, granular data protection, sensitive tables, compliance risks, security design, sap hana authorization concept, effective privileges, schema vs object privileges , KBA , HAN-DB-SEC , SAP HANA Security & User Management , Problem