SAP Hana 2.0 Security Guide (Hardcover, 2, Enlarged)

... Preface ... 19

... Purpose ... 19

... Who Should Read This Book? ... 19

... Structure of This Book ... 20

... Acknowledgments ... 25

... Introduction ... 27

... Overview of SAP HANA ... 27

... Introduction to SAP HANA Security ... 35

... Importance of Securing Your SAP HANA System ... 36

... Summary ... 37

1 ... Managing Security with the SAP HANA Cockpit ... 39

1.1 ... What Is the SAP HANA Cockpit? ... 40

1.2 ... Security Areas in SAP HANA Cockpit ... 54

1.3 ... SAP HANA Database Explorer and SQL Console ... 61

1.4 ... Summary ... 64

2 ... Introduction to SAP HANA Privileges ... 65

2.1 ... Privileges within SAP HANA ... 66

2.2 ... Privilege Validation and Assignment ... 72

2.3 ... Summary ... 76

3 ... Catalog Objects ... 77

3.1 ... What Are SAP HANA Catalog Objects? ... 77

3.2 ... Creating and Managing Native Catalog Objects ... 79

3.3 ... Creating and Managing Repository Catalog Objects ... 84

3.4 ... Deploying Repository Objects ... 90

3.5 ... Case Study ... 96

3.6 ... Summary ... 101

4 ... User Accounts ... 103

4.1 ... What Are User Accounts? ... 103

4.2 ... Creating and Managing User Accounts ... 110

4.3 ... Granting and Revoking Privileges ... 123

4.4 ... Managing User Role Assignments ... 143

4.5 ... Case Study: Provisioning Users with SQL Scripts and Stored Procedures ... 150

4.6 ... Summary ... 160

5 ... Database Roles ... 161

5.1 ... What Are Roles? ... 161

5.2 ... Creating and Managing Roles ... 165

5.3 ... Granting and Revoking Privileges ... 170

5.4 ... Managing Nested Roles ... 192

5.5 ... Mapping LDAP Groups to Roles ... 196

5.6 ... Summary ... 199

6 ... Repository Roles ... 201

6.1 ... What Are Repository Roles? ... 201

6.2 ... Managing Repository Roles with Design-Time Scripts ... 207

6.3 ... Granting and Revoking Privileges in Design-Time Scripts ... 213

6.4 ... Managing Repository Roles with the SAP HANA Web-Based Development Workbench ... 221

6.5 ... Granting Repository Roles to Users ... 232

6.6 ... Case Study: Creating Basic Repository Roles ... 234

6.7 ... Summary ... 240

7 ... System Privileges ... 241

7.1 ... What Are System Privileges? ... 241

7.2 ... Default System Privileges ... 242

7.3 ... Granting System Privileges ... 253

7.4 ... Case Study: Security Administrator System Privileges ... 262

7.5 ... Summary ... 267

8 ... Object Privileges ... 269

8.1 ... What Are Object Privileges? ... 269

8.2 ... Granting Object Privileges with SQL ... 280

8.3 ... Granting Object Privileges with the SAP HANA Cockpit ... 285

8.4 ... Granting Object Privileges with the SAP HANA Web-Based Development Workbench ... 287

8.5 ... Granting Object Privileges with Repository Roles ... 289

8.6 ... Case Study: Updating Repository Roles to Access Information Views ... 295

8.7 ... Summary ... 299

9 ... Package Privileges ... 301

9.1 ... What Is the SAP HANA Development Repository? ... 301

9.2 ... What Are Package Privileges? ... 304

9.3 ... Granting Package Privileges ... 307

9.4 ... Case Study: Preventing Content Developers from Elevating Their Privileges ... 315

9.5 ... Summary ... 319

10 ... Analytic Privileges ... 321

10.1 ... What Are SAP HANA Information Views? ... 322

10.2 ... What Are Analytic Privileges? ... 324

10.3 ... _SYS_BI_CP_ALL: A System-Generated Analytic Privilege ... 330

10.4 ... Managing Static Analytic Privileges ... 331

10.5 ... Managing Dynamic Analytic Privileges ... 336

10.6 ... Managing Dynamic Expression-Based SQL Analytic Privileges ... 346

10.7 ... Troubleshooting Effective Analytic Privileges and Filter Conditions ... 350

10.8 ... Granting Analytic Privileges ... 351

10.9 ... Summary ... 359

11 ... Application Privileges ... 361

11.1 ... What Are Application Privileges? ... 361

11.2 ... Creating Application Privileges ... 362

11.3 ... Granting Application