Access a Classic Schema from Business Application Studio

1. Return to the SAP Cloud Platform Cockpit and the HANA Cloud Management screen. Choose Open SAP HANA Database Explorer from the Actions column.

   

2. The Database Explorer will open in another browser tab and the DB entry for your DBADMIN user will be selected. Choose Open SQL Console from the context menu

   

3. Use the following code to create a schema and a user. You will also create a simple table to use as an example for cross-container access.

   You will create a SQL role and assign it to the user PLUSR with the permissions granted manually before. This user will be used for the connection between the HDI container and the plain schema, and will grant the role to the HDI container technical user.

   CREATE SCHEMA "PLAIN";
   CREATE USER PLUSR PASSWORD "HanaRocks01" SET USERGROUP DEFAULT;
     ALTER USER PLUSR DISABLE PASSWORD LIFETIME;
   
   CREATE ROW TABLE "PLAIN"."REGIONS" (	REGION NVARCHAR(5), 	DESCRIPTION NVARCHAR(100) );
   
   CREATE ROLE CCROLE;
   grant  SELECT, UPDATE, INSERT, DELETE, EXECUTE, SELECT METADATA ON SCHEMA "PLAIN" TO CCROLE with grant option;
   grant  CCROLE to PLUSR with admin option;
   
   

4. Use the green play button or press F8 to execute the statement.

   

What is going on?

 
You have created a plain schema in your SAP HANA database. When you created a database module in SAP Business Application Studio, an HDI container was automatically generated.
 

 

But ultimately these are both just schemas within the same HANA Cloud Database instance. We can communicate between the HDI Container Schema and the classic Schema using synonyms.

You now have a schema with a table and data in it. You have also created a user called PLUSR with permissions to perform basic operations on that schema. You will now create a user-provided service to access the schema through the user PLUSR from your HANA DB Project in the Business Application Studio.

1. Return to the Business Application Studio and the project which you created in previous tutorials in this group. Open a new Terminal

   

2. Issue this command from the Terminal

   cf cups CC_ACCESS -p "{\"user\":\"PLUSR\",\"password\":\"HanaRocks01\",\"tags\":[\"hana\"] , \"schema\" : \"PLAIN\" }"
   

   

3. Use add database connection option in the SAP HANA PROJECTS view.

   

4. In the Add Database Connection wizard that opens, please select Existing User-Provided service instance as the Connection Type and then choose CC_ACCESS as the User-Provided service instance we just created. Press Add

   

5. From the SAP HANA PROJECTS view, you should see that the User Provided Service is not part of the Database Connections of your project.

   

You will now create an artifact that grants access to the two technical users of your HDI container. These are not real users, but technical ones.

1. Create a new file under db.

   

2. Call it cfg/plain.hdbgrants

   

3. And use the following code in it:

   {
     "CC_ACCESS": {
       "object_owner" : {
         "roles" : ["CCROLE" ]
       },
       "application_user" : {
         "roles" : ["CCROLE" ]
       }
     }
   }
   

4. Save the file.

1. You can now use the table in the classic schema with other objects created in your HDI container. In data folder, create a new database artifact

   

2. Choose hdbview and call it RegiontextsView

   

3. Paste the following code into the view.

   VIEW "RegionTextsView"
   	(REGION, DESCRIPTION )
   	as select REGION, DESCRIPTION
   	from REGIONS
   

4. Save and Deploy.

5. Return to the Database Explorer and your HDI Container.

   

6. Right-click on the view and choose Open Data. Paste the generated SQL statement in the box below to complete the validation.

   

Error: Insufficient privilege: Detailed info for this error can be found with guid

You can see what is missing by executing the following statement in a SQL console connected to the database

 call SYS.GET_INSUFFICIENT_PRIVILEGE_ERROR_DETAILS ('<GUID>', ?)

This procedure will show the session user name, the technical user (HDI object owner) executing the statement, the privilege (e.g., SELECT) and some flags starting with IS_MISSING. A TRUE value under one of those flags indicates missing authorizations.

Make sure the user in the user provided service has permissions for SELECT and SELECT METADATA with grant option.