cancel
Showing results for 
Search instead for 
Did you mean: 

Column level restriction using graphical calculation view in SAP HANA

0 Kudos
1,420

Hi All,

There is a business requirement to create a graphical calculation view in SAP HANA to fulfill below criteria:

  • Only those columns should be visible to user to which the user has access to (Using predefined access table)
  • Eg. If User A is not authorized to access column B, D, F from CV_XYZ then those columns should not appear in output select query for CV. However on other hand if user B is authorized to see full data of CV then he should be able to read whole data of that CV.

In this scenario, predefined access table is explained below.

  • "POC"."T_ATTRIBUTE_ACCESS" is the table where the attributes that are accessible to the user A and B are set beforehand, where access table data contain below rows.

The expected output with above access table should be as below:

  • If CV_XYZ is queried by DB User A then at run time data of PERSON_ID, CUSTOMER_NAME, GEOGRAPHY, COUNTRY only should be visible.
  • However if the same CV, CV_XYZ is queried by DB User B then at runtime PERSON_ID, CUSTOMER_NAME, EMP_Joining_Date, EMP_SAL, GEOGRAPHY, COUNTRY, all these columns should be visible.

We would like to implement this in our project with graphical calculation views being called from user of same tenant or cross tenant.

Kindly guide us..

Thanks & Regards,

Krina

View Entire Topic
Cocquerel
Active Contributor
0 Kudos
0 Kudos

Hi Michael,

Thanks for the suggestion.

Data masking works only for few data types like varchar and Nvarchar..

We have Numbers and integers as well as a datatype of the columns present in table. Hence column masking will not be that helpful.