Hi everyone,
I have got a question related to authorizations and roles. Imagine the following scenario: you have got an SAP HANA based ABAP system (e.g. SuiteOnHANA or BWonHANA), therefore with a database schema for this ABAP system - let's call it SAPA4H.
You have a group of developers who want to implement SAP HANA native views based on database tables which reside in the schema SAPA4H.
No big deal.
But you do not want to give them permissions to all tables within that schema, you want to restrict the permission by defining an authorization object (role) which only contains the tables they are allowed to read. But it's a larger number of tables so maintaining them all manually within the repository role is much effort, e. g. all tables which start with /BIC/*.
So you think that the solution could look like this:
catalog sql object "SAPA4H"."/BIC/*": SELECT;
But it doesn't work.
My question is: is it possible to define an object privilege with a wildcard? Or any alternative approach?
Thanks a lot for your help.
Martin