Catalog Object Grant ACCESS Issue in HANA DB

[kirankumar440]

Hello All,

Could you please help with your inputs on the below case.

We have one HANA Stored Procedure. This is a directly created as a Catalog object by some Developer & that got migrated to Production as well.  He is the Owner of that Procedure , as its created by his ID.

Now that Developer has left the Organization , we want to grant that Procedure ( Catalog object) with EXECUTE privilege to some Technical ID which needs to call that procedure from external system ( ex: Informatica).

How can we assign that access to that technical ID , as the Developer is no longer available? 

In this case SYSTEM user also will not have access to grant access to other except the Owner.

Br

Kiran K

[XaviPolo · Accepted solution]

Hi,

I think that by resetting the user and logging in with it, you can transfer the property to another user.

Another option is to recover the code of the procedure and generate a new one in a different space, and update the objects that used it.

Regards,

[kirankumar440 · Accepted solution]

Hi Xavi , Thank you for the response. I have suggested the same with the Security team, they were saying its against the policy. Regarding the other option , that procedure is used in multiple interfaces & requires changes at multiple places. Just for my understanding there is no other options right ? only object owner can assign access to other right ?

[XaviPolo · Accepted solution]

Yes, by default the owner is the user that creates the object, and ONLY if this user give permission to others, they can change the object. And I agree that it is not good policy to reset users, but neither is it good policy to have a user with a password that ONLY a ex-employee knows :-).

[HakanHaslaman]

The HANA database object's creator is its owner with full privileges as I know. If the owner is unavailable, may the SYSTEM user can change ownership. But ensure the SYSTEM user has the necessary privileges to run commands.