SAP Hana 2.0 Security Guide - Haun, Jonathan

. .

Résumé :
... Preface ... 19

... Purpose ... 19

... Who Should Read This Book? ... 19

... Structure of This Book ... 20

... Acknowledgments ... 25

... Introduction ... 27

... Overview of SAP HANA ... 27

... Introduction to SAP HANA Security ... 35

... Importance of Securing Your SAP HANA System ... 36

... Summary ... 37

1 ... Managing Security with the SAP HANA Cockpit ... 39

1.1 ... What Is the SAP HANA Cockpit? ... 40

1.2 ... Security Areas in SAP HANA Cockpit ... 54

1.3 ... SAP HANA Database Explorer and SQL Console ... 61

1.4 ... Summary ... 64

2 ... Introduction to SAP HANA Privileges ... 65

2.1 ... Privileges within SAP HANA ... 66

2.2 ... Privilege Validation and Assignment ... 72

2.3 ... Summary ... 76

3 ... Catalog Objects ... 77

3.1 ... What Are SAP HANA Catalog Objects? ... 77

3.2 ... Creating and Managing Native Catalog Objects ... 79

3.3 ... Creating and Managing Repository Catalog Objects ... 84

3.4 ... Deploying Repository Objects ... 90

3.5 ... Case Study ... 96

3.6 ... Summary ... 101

4 ... User Accounts ... 103

4.1 ... What Are User Accounts? ... 103

4.2 ... Creating and Managing User Accounts ... 110

4.3 ... Granting and Revoking Privileges ... 123

4.4 ... Managing User Role Assignments ... 143

4.5 ... Case Study: Provisioning Users with SQL Scripts and Stored Procedures ... 150

4.6 ... Summary ... 160

5 ... Database Roles ... 161

5.1 ... What Are Roles? ... 161

5.2 ... Creating and Managing Roles ... 165

5.3 ... Granting and Revoking Privileges ... 170

5.4 ... Managing Nested Roles ... 192

5.5 ... Mapping LDAP Groups to Roles ... 196

5.6 ... Summary ... 199

6 ... Repository Roles ... 201

6.1 ... What Are Repository Roles? ... 201

6.2 ... Managing Repository Roles with Design-Time Scripts ... 207

6.3 ... Granting and Revoking Privileges in Design-Time Scripts ... 213

6.4 ... Managing Repository Roles with the SAP HANA Web-Based Development Workbench ... 221

6.5 ... Granting Repository Roles to Users ... 232

6.6 ... Case Study: Creating Basic Repository Roles ... 234

6.7 ... Summary ... 240

7 ... System Privileges ... 241

7.1 ... What Are System Privileges? ... 241

7.2 ... Default System Privileges ... 242

7.3 ... Granting System Privileges ... 253

7.4 ... Case Study: Security Administrator System Privileges ... 262

7.5 ... Summary ... 267

8 ... Object Privileges ... 269

8.1 ... What Are Object Privileges? ... 269

8.2 ... Granting Object Privileges with SQL ... 280

8.3 ... Granting Object Privileges with the SAP HANA Cockpit ... 285

8.4 ... Granting Object Privileges with the SAP HANA Web-Based Development Workbench ... 287

8.5 ... Granting Object Privileges with Repository Roles ... 289

8.6 ... Case Study: Updating Repository Roles to Access Information Views ... 295

8.7 ... Summary ... 299

9 ... Package Privileges ... 301

9.1 ... What Is the SAP HANA Development Repository? ... 301

9.2 ... What Are Package Privileges? ... 304

9.3 ... Granting Package Privileges ... 307

9.4 ... Case Study: Preventing Content Developers from Elevating Their Privileges ... 315

9.5 ... Summary ... 319

Biographie:
Jonathan Haun currently serves as the lead SAP HANA consultant and consulting manager with Decision First Technologies. Over the past two years, he has had the opportunity to help several clients implement solutions using SAP HANA. In addition to being certified in multiple
SAP BusinessObjects tools, he is also a SAP Certified Application Associate and SAP Certified Technology Associate for SAP HANA 1.0. Jonathan has worked in the field of business intelligence for more than 10 years. During this time, he has gained invaluable experience while helping customers implement solutions using the tools from the SAP BusinessObjects product line. Before working as a full-time business intelligence consultant, he worked in a variety of information technology management and administrative roles. His combination of experience and wealth of technical knowledge make him an ideal source of information pertaining to business intelligence solutions powered by SAP
HANA. You can follow Jonathan on Twitter at @jdh2n or visit his blog at http://bobj.sapbiblog.com....

Sommaire:
... Preface ... 19

... Purpose ... 19

... Who Should Read This Book? ... 19

... Structure of This Book ... 20

... Acknowledgments ... 25

... Introduction ... 27

... Overview of SAP HANA ... 27

... Introduction to SAP HANA Security ... 35

... Importance of Securing Your SAP HANA System ... 36

... Summary ... 37

1 ... Managing Security with the SAP HANA Cockpit ... 39

1.1 ... What Is the SAP HANA Cockpit? ... 40

1.2 ... Security Areas in SAP HANA Cockpit ... 54

1.3 ... SAP HANA Database Explorer and SQL Console ... 61

1.4 ... Summary ... 64

2 ... Introduction to SAP HANA Privileges ... 65

2.1 ... Privileges within SAP HANA ... 66

2.2 ... Privilege Validation and Assignment ... 72

2.3 ... Summary ... 76

3 ... Catalog Objects ... 77

3.1 ... What Are SAP HANA Catalog Objects? ... 77

3.2 ... Creating and Managing Native Catalog Objects ... 79

3.3 ... Creating and Managing Repository Catalog Objects ... 84

3.4 ... Deploying Repository Objects ... 90

3.5 ... Case Study ... 96

3.6 ... Summary ... 101

4 ... User Accounts ... 103

4.1 ... What Are User Accounts? ... 103

4.2 ... Creating and Managing User Accounts ... 110

4.3 ... Granting and Revoking Privileges ... 123

4.4 ... Managing User Role Assignments ... 143

4.5 ... Case Study: Provisioning Users with SQL Scripts and Stored Procedures ... 150

4.6 ... Summary ... 160

5 ... Database Roles ... 161

5.1 ... What Are Roles? ... 161

5.2 ... Creating and Managing Roles ... 165

5.3 ... Granting and Revoking Privileges ... 170

5.4 ... Managing Nested Roles ... 192

5.5 ... Mapping LDAP Groups to Roles ... 196

5.6 ... Summary ... 199

6 ... Repository Roles ... 201

6.1 ... What Are Repository Roles? ... 201

6.2 ... Managing Repository Roles with Design-Time Scripts ... 207

6.3 ... Granting and Revoking Privileges in Design-Time Scripts ... 213

6.4 ... Managing Repository Roles with the SAP HANA Web-Based Development Workbench ... 221

6.5 ... Granting Repository Roles to Users ... 232

6.6 ... Case Study: Creating Basic Repository Roles ... 234

6.7 ... Summary ... 240

7 ... System Privileges ... 241

7.1 ... What Are System Privileges? ... 241

7.2 ... Default System Privileges ... 242

7.3 ... Granting System Privileges ... 253

7.4 ... Case Study: Security Administrator System Privileges ... 262

7.5 ... Summary ... 267

8 ... Object Privileges ... 269

8.1 ... What Are Object Privileges? ... 269

8.2 ... Granting Object Privileges with SQL ... 280

8.3 ... Granting Object Privileges with the SAP HANA Cockpit ... 285

8.4 ... Granting Object Privileges with the SAP HANA Web-Based Development Workbench ... 287

8.5 ... Granting Object Privileges with Repository Roles ... 289

8.6 ... Case Study: Updating Repository Roles to Access Information Views ... 295

8.7 ... Summary ... 299

9 ... Package Privileges ... 301

9.1 ... What Is the SAP HANA Development Repository? ... 301

9.2 ... What Are Package Privileges? ... 304

9.3 ... Granting Package Privileges ... 307

9.4 ... Case Study: Preventing Content Developers from Elevating Their Privileges ... 315

9.5 ... Summary ... 319