topic Re: Problem granting privileges using user-provided service in SAP TechEd Discussions

Problem granting privileges using user-provided service

surreyhobbit — Mon, 13 Dec 2021 14:48:35 GMT

Tutorials: https://developers.sap.com/tutorials/hana-cloud-collaborative-database-development-6.html
--------------------------

I am following the Teched tutorial "hana-cloud-collaborative-database-development" and am having issues in step 2 of module 6. After adding the `generic.hdbgrants` file I am getting an error during deployment:

Processing grants files...
 Processing "src/generic.hdbgrants"...
  Using grantor service "UPS_GENERIC" of type "sql"
Deployment ended at 2021-12-13 14:30:06
Error: authentication failed
grantor service: "UPS_GENERIC", type: "sql", user: "UPS_GRANTOR"
file name: src/generic.hdbgrants<br>

What could be the issue here?

Re: Problem granting privileges using user-provided service

martinstenzig — Mon, 13 Dec 2021 15:09:56 GMT

Steffen,

One of the most likely causes is that you created a dedicated grant user and you have not changed the initial password. I usually use the following two lines to prepare a user to be used as a grantor user.

CREATE USER XXX_GRANTOR_USER PASSWORD XXX123# NO FORCE_FIRST_PASSWORD_CHANGE
GRANT "CREATE VIRTUAL TABLE","CREATE VIRTUAL FUNCTION", "CREATE REMOTE SUBSCRIPTION", "PROCESS REMOTE SUBSCRIPTION EXCEPTION", "ALTER", "DROP" ON REMOTE SOURCE "<Your remote source name>" TO XXX_GRANTOR_USER WITH GRANT OPTION;

Re: Problem granting privileges using user-provided service

surreyhobbit — Tue, 14 Dec 2021 08:59:13 GMT

Martin,

thanks for your response. As per the tutorial I indeed created a dedicated grant user, but it also has the option of not having to change the password.

This is what i did:

create user UPS_GRANTOR password "XXXX" NO FORCE_FIRST_PASSWORD_CHANGE;

grant  "genericRoleForOO" to UPS_GRANTOR WITH ADMIN OPTION;
grant  "genericRoleForAP" to UPS_GRANTOR WITH ADMIN OPTION;

I am wondering if maybe there is something missing in the tutorial. I traced my steps back and I did all previous steps as described.