HANA DB User for ABAP/ Privileges on Users- Attach Debugger

Hi SAP HANA/ ABAP experts,
I was trying to create an ABAP on HANA role for on HANA DB.
role TestRoles::developer_role
extends catalog role "ABAP_DEV", "ABAP_ADMIN"
catalog sql object "_SYS_REPO"."GRANT_SCHEMA_PRIVILEGE_ON_ACTIVATED_CONTENT","_SYS_REPO"."GRANT_PRIVILEGE_ON_ACTIVATED_CONTENT": EXECUTE;
catalog schema "SAPSND": SELECT, DEBUG;
system privilege: CATALOG READ;
I also would like to get the next in place: (for External Debugging AMDP on HANA). Does anyone know how to geht this into a role
grant attachdebuggerto DEBUGUSER;
Please refer to next OSS for more details: 1942471 - New Debug Privileges for SQLScript Debugger.
Thanks in advance.
Best Regards,
Bart

As of HANA SP9 the next is not required anymore for AMDP debugging.
Anyway before SP9 it could be solved by logging on with ECC user (mostly SAP<SYSID>, but could also be named differntly), then create a new role with the ATTACH DEBUGGER (Tab Privileges on Users). And then include in repository role, refer to next example ROLE XYZ
extends catalog role "ABAP_DEV", "ABAP_ADMIN", "ROLE XYZ"

Similar Messages

How is ist possible to maintain the time dependencies for Abap Privileges?

How is ist possible to maintain the time dependencies for Abap Privileges?
In our Installation of SAP IDM 7.0 SP2 Patch 4 the time dependencies of Abap Roles are imported in the IC by Initial loads Jobs. How can the see / change the dependencies in our IDM Workflow UI? Presently nothing jet is shown, no Attribute is predefined..
Can anybody give us a hint?
Thank you in advance !!

If you click VIEW/SHOW PLAYHEAD INFO, you will see the timecodes as you scrub. (Consumer timecodes, not pro timecodes).
This works if you imported your footage from a camcorder, either miniDV or AVCHD.
However, if you have imported an analog file, or saved a DV file to a QuickTime File, you may just see the file creation date in VIEW PLAYHEAD.
However, there is a trick to getting even these clips to display timecodes if you know the start time.
First pick a clip. Make a copy and drag it to your desktop, just so you don't lose anything.
Rename this copy in the following format clip-yyyy-mm-dd hh;mm;ss.current file extension.
For example, clip-2001-07-14 09;30;45.mov (note the space between the day and the hour)
This would be a .mov clip that starts with the first frame at July 14, 2001 at 9:30:45 AM
Then import the clip into iMovie. You now have timecodes at the playhead.

Can use RBAC for grant privilege to user on specific directory or not?

If I want user "aaa:group1" to have write privilege on specific directory of user "bbb:group2" (such as /export/home/bbb).
Can I use RBAC Feature for this case? How to?
Because basic permission of Unix very large scope (user, group, other).
If I specific folder "/export/home/bbb" to rwxrwxr-x, then change group of user "aaa" to group2. Other user in group2 will have write privilege too.
Thank you.

If you want fine grain control over directory permissions than the feature you want are access control lists (acl's).
Try man setfacl, though I warn you that the documentation for acl's are pretty confusing...

SAP HANA development languages for ABAP Developer

Hi I was just looking at some blogs on HANA. Can anyone tell me how to learn the new HANA programming languages SQLScript etc. As you know not many companies use HANA yet, so getting to use a real HANA box can be hard as of now.. What are the other options... Can I install the HANA software on my PC and use it with a few Excel files or MS-Access db just to workout what these programming languages actually do.. Ofcourse I dont have access to the HANA box(hardware that SAP talks about). I am an ABAP Developer I have access to ECC if that helps.
Also from what I can understand the HANA box sits on top of the ECC/BW systems etc or would HANA replace some aspects of the Application Server and sit in the R3 architecture? if the second scenario is true would most of the ABAP reports etc written using traditional ABAP have to be replaced or modified to use HANA related code in them to improve performance(I know ABAP doesnt support this yet).
If companies start using HANA I would think most ABAP developments just querying to get data would need to be rewritten-even the webdynpro applications for performance.
Can HANA update DBs as well?
Would HANA programming be a required skill for most ABAP developers in future?
Edited by: sk123456 on Sep 29, 2011 3:21 AM
Edited by: sk123456 on Sep 29, 2011 3:35 AM

Hello Sk,
so far (with HANA 1.0 SPS 2), the only relevant languages to learn is SQL and SQL Script. Check http://service.sap.com/hana which has SQL and SQL Script Guides.
Since you know ABAP already, you will pick these things up rather quickly. There are as you noted some concepts you have to understand in order to make optimal use of the HANA features and get maximum performance (anyone could come up with SQL or SQL script that crawls to a halt even in HANA). One key is to process everything is sets of data rather than record by record. Another important item is to keep all processing within the column engine. Also avoid joins that lead to large intermediate results. We are currently writing some how-to guides which will be publised on http://www.experiencesaphana.com/. Stay tuned!
In terms of the architecture, I would say HANA as a database sits below the application server and/or client, for example, BW powered by HANA where HANA plays the role of the DBMS. The other option is to run side-by-side for example, connecting HANA to an existing ECC (that runs on MS-SQL). In either case, you are right; the logic (either in the application on top of HANA, or the models inside HANA) needs to be changed or created to take advantage of HANA.
Where can you learn more? Class room training TZHANA or come back regularly to the Try section of the Experience Site where we plan to publish other options.
Regards,
Marc
SAP Customer Solution Adoption (CSA)
PS: And we certainly have plans to integrate HANA features into ABAP

How to create a new user in Netweaver system for ABAP training?

Hello,
I had been learning ABAP using a trial version but recently purchased and installed a developer subscription of Netweaver 2004 SR3. Can someone please tell me the best way to create a new user for ABAP development and assign the needed transaction authorizations appropriate for a developer? I was able to create one in SU01 and assign a profile of S_ABAP_ALL but still could not get into SE80 with that logon. And the user had a license expiration of only one month, is there a way to obtain a permenant license for it from SAP?
Thanks
-Chris Piret

Hi Chris,
You can create a role in t-code pfcg with all required transaction and assign it to your user id or else You can assign profile sap_all to you for all authorization.
Regarding license you can get it from sap.How to get it is explained in the document in the below link.
https://websmp108.sap-ag.de/~sapidb/011000358700006339962006E
For ABAP development you need developer key and that also you will get from sap marketplace
Regards
Ashok

How to assign roles for each kind of users

Hello,
i am creating users for each kind of users, say abap developer or FI/MM/SD function users, in IDES ECC 6. it doesnt make me any sense how to assign which roles to which user( there are more than 2000 sap standard roles). can anyone give me some guideline how to create each kind of users.
any response will be awarded!
Thanks a lot!
Samson

I don't understand your question....
When sap is implemented usually part of the project is creating roles based on a blueprint designed to adjust to your company needs...
Basically Standard roles are there to be used as templates for your own roles.
Users as "dialog users" do not have classification... the special access attributes are given by the roles assigned to it based on the project plan desing pre-installation.
Hope that help
Juan

Setting Users for my managed services and application pools

I setup my SharePoint 2013 test environment and I developed an intranet site. Now inside my test environment I set all the application pool & managed services to use Farm user account for simplicity. Now I want to setup my UAT environment and I want
to follow the best practice for managing users and service accounts.
I have read the “Core Solutions Of MS SharePoint 2013” book, and it have listed the following table:-
First question. What is the difference when saying that the user “Must be a member of the Farm Administrators group” Or must be “Domain user account”?
Second question , when I first install SharePoint 2013 a lot of applications pools and managed services such as excel services , access services, Performance Point Service Application, business
data connectivity and Machine Translation Service will be automatically created , so which account they will be using and should I define separate accounts for each managed service ?
Third question. What is the recommendation for SharePoint 2013 regarding service accounts?, to use separate account for each manage service, for example one user for excel services , second user
for access services ,etc?
Fourth question. For example the documentation mentioned that the Required roles for the excel services is “Domain user account.”, but what permissions this domain user need to have ?
thanks for any help, and sorry so adding multiple questions inside the same post.

Q #1: This means the user must be part of the Farm Admins group. Every user is a Domain User.
Q #2: Generally those should be using a single Domain User account in a single Application Pool to minimize memory usage and reduce unnecessary complexity.
Q #3: The less Application Pools the better. E.g. One account/App Pool for all Web Applications, one account/App Pool for all Service Applications, and then Central Administration is obviously separate.
Q #4: You don't need to specifically give this type of user any sort of rights
Trevor Seward
Follow or contact me at...
&nbsp&nbsp
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

Creating attachment in Webdynpro for ABAP

Hi Expertrs,
I am new to webdynpro for ABAP. I have a requirement like I need to create an attachment in webdynpro screen. I have searched the forums and I got the class CL_GOS_SRV_ATTACHMENT_CREATE and method EXECUTE_ITS. but when I call this method I am getting dump in the method.
Can anybody please suggest me how to create attachment in webdynpro for ABAP?
When ever attachment is created and clicks on save button workflow will be triggered and a workitem appears portal when ever the user click on the display attachment I need to display the created attachemnt.
Please suggest me.
Thank You.
Ranganadh

Hi,
Please follow the steps below;
Follow these steps;
1.create a node 'FILEUPLOAD' with 2 attributes
a) FILECONTENT type XSTRING
b) FILENAME type STRING
2. Create a fileuplaod uielement
a) bind the data property with attribute 'FILECONTENT'
b) bind the filename property with attribute 'FILENAME'
3. Create a button 'UPLOAD'
a) create the action method for this button
Paste the following code in this method
Data l_node type ref to if_wd_context_node.
Data l_stru type wd_this->elements_cn_fileupload.
l_node = wd_context->get_child_node( 'FILEUPLOAD' ).
l_node->get_static_attributes( importing static_attributes = l_stru ).
"save l_stru-fielcontent in database. Your file will be saved in the database in XSTRING format.
Now when you want to display this file;
1. Create a Node 'FILEDOWNLOAD' with 1 attribute
a) FILE type XSTRING
2. Create a filedownload uielement
a) bind the data property with the attribute 'FILE'
Fetch the file from databased and set the File attribute of teh filedownload uielemnt to display the file.
Hope this helps!
Radhika.

Printing selected data in ALV or Table in Web Dynpro for ABAP

Hi Experts,
I have ALV / Table report in the Web Dypro for ABAP App. User wants to select a record in ALV/ table and / or preview it in PDF form and then he/she can print it. What is the technical steps do I need to achieve this result?
Thanks!
- Anthony -

Hi,
In the Road map UI element , you can find number of Step .
Add one Interactive form in one that steps. Capture that records , pass that records to Step where the interactive form is there.
I think it will work...
regards,
Rama

Right Rights for ABAP developers (no SAP_ALL)

Hi there,
I have to create new users for ABAP development, but I don´t what to assign them all the profile SAP_APP.
Anybody knows what a minimum rights to use e.g. SE80 (object-navigator) for developers?
Yours,
Yogi.

Hi Yogi,
Try with assigning profile S_ABAP_ALL to ABAP user-id.
Regards,
Payal

Create a new user for oracle 10G ASM instance with sysdba system privilege

Hi,
In our Golden Gate Project, we require the SYS user credential to connect to the Oracle 10g ASM instance to read the database transaction logs.But our client is not providing the SYS user credential to connnect to ASM instance.
I'm getting the error message "ORA-01109: database not open",When I tried to create a new user using the below the steps in oracle 10g ASM instance
1. Login using "sqlplus / as sysdba"
2. Create user <username> identified by <password>;
But in oracle 11g ASM instance, I'm able to create new user by connecting the ASM instance with SYSASM role without issues.
Is there is any workaround to create a new user with sysdba system privilege in oracle 10g ASM instance?.
Thanks in advance .

Hi,
Recreate the password file for the ASM instance as follows:
Unix:
orapwd file=<ORACLE_HOME>/dbs/PWD<SID> password=<sys_password>
Windows:
orapwd file=<ORACLE_HOME>/database/PWD<SID>.ora password=<sys_password>
Now sys password is reset, we are ready to use sys for ASM management. I decided to create another user ASMDBA as I tried above.
SQL> create user ASMDBA identified by test01;
User created.
SQL> grant SYSASM, SYSOPER to ASMDBA;
Grant succeeded.
SQL> select * from v$pwfile_users;
USERNAME SYSDBA SYSOPE SYSASM
SYS TRUE TRUE TRUE
ASMDBA FALSE TRUE TRUE
Please see this link : http://orachat.com/how-to-change-asm-sys-password-creating-sysasm-user-11g/
Thank you

Is it possible to reset password for any user using abap program

Hi friends,
Is it possible to reset password for any user using abap program by specifying client number and user id. in selection screen.
if any code for that to reset password please mail me.
Thanks & Regards,
Yogesh

Hello Yogesh,
Yes you can reset the password for any body using ABAP Code. But for that you really don't need any client number.
If this process is on regular basis, then recommended is to use BAPI for changing the user details Otherwise BDC also works fine.
=> Function Module - BAPI_USER_CHANGE
Call this in the program for resetting the password.
=> CALL TRANSACTION 'SU01' USING InternalTable
This will be executed in the BDC of SU01 transaction recording. Use the Password Change button in the application toolbar of transaction while recording.
Hope this helps.
PS If the answer solves your query, plz close the thread by marking it solved and rewarding each reply.
Regards

User mapping when installing JAVA addin for ABAP

Hi,
I have installd SAP ABAP on a domain.
As the ABAP went fine and successfully gets installed.
When I am installing JAVA addon for ABAP it is throwing an error lke the users are not mapped.
So can any one guide me where actually I should map the SAP users in a domain.
Prashanth

Your question is very vague, please post the full error.
As this is a java add-in it should user ABAP as datasource so no user mapping should be required.
User mapping is used where java and backend system use different datasources and the naming conventions are different...
Theres not enough information here to give you an objective answer.
Regards
Juan

ABAP-Programming for SAP BW u0096 User-Exits und BAdIs

Hi experts,
i am a novice und looking for informations about Badi and User-exits for BW .
i want to learn how to programm extractors.
Can you you help me by giving me some informations or documents or sap links where i can find informations?
Cheers

Dear Mr Herzog,
Congratulations for the book: Abap Developement for SAP Netweaver BI: User exits and BadIs.
We're trying to implement the suggestions on the chapter 5.1.1 Interface of function module EXIT_SAPLRSR0_001 (page 136), however, we're having problens with the abap sintax CALL_FUNCTION l_d_name IF FOUND.
The command IF FOUND is not accepted.
It'll be very helpful to avoid issues on tranporting include zxrsru01.
I appreciate any additional help on how to implement it.
Best Rgs
Eliseo Bouzan

Error: "The user for which we are checking a privilege should be in the same org as the context provided"

Hi All,
Recently, we've encountered some weird error for some users when trying to assign records to them through both the CRM UI and CRM SDK Call.
The error message saying: "The user for which we are checking a privilege should be in the same org as the context provided".
Here is the trace log for assigning a lead for one of those users (same error for other records):
[2010-08-09 13:58:06.0] Process: w3wp |Organization:d905ae4d-8d9f-df11-a1b0-00237df0351e |Thread: 22 |Category: Exception |User: fb56b107-949f-df11-a1b0-00237df0351e |Level: Error | CrmArgumentException..ctor
at CrmArgumentException..ctor(String message)
at SecurityLibrary.TryCheckPrivilege(Guid user, Guid privilege, ExecutionContext context)
at SecurityLibrary.CheckPrivilege(Guid user, Guid privilege, ExecutionContext context)
at SecurityLibrary.CheckPrivilege(Guid user, EntityMetadata metadata, PrivilegeType type, ExecutionContext context)
at CascadeEngine.AssignDB(BusinessEntityMoniker moniker, SecurityPrincipal assignee, ExecutionContext context)
at RuntimeMethodHandle._InvokeMethodFast(Object target, Object[] arguments, SignatureStruct& sig, MethodAttributes methodAttributes, RuntimeTypeHandle typeOwner)
at RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture, Boolean skipVisibilityChecks)
at RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
at LogicalMethodInfo.Invoke(Object target, Object[] values)
at InternalOperationPlugin.Execute(IPluginExecutionContext context)
at PluginStep.Execute(PipelineExecutionContext context)
at Pipeline.Execute(PipelineExecutionContext context)
at MessageProcessor.Execute(PipelineExecutionContext context)
at InternalMessageDispatcher.Execute(PipelineExecutionContext context)
at ExternalMessageDispatcher.Execute(String messageName, Int32 primaryObjectTypeCode, Int32 secondaryObjectTypeCode, PropertyBag fields, CorrelationToken correlationToken, CallerOriginToken originToken, UserAuth userAuth, Guid callerId)
at RequestBase.Process(Int32 primaryObjectTypeCode, Int32 secondaryObjectTypeCode, CorrelationToken correlationToken, CallerOriginToken originToken, UserAuth userAuth, Guid callerId)
at RequestBase.Process(CorrelationToken correlationToken, CallerOriginToken originToken, UserAuth userAuth, Guid callerId)
at CrmServiceInternal.Execute(RequestBase request, CorrelationToken correlationToken, CallerOriginToken originToken, UserAuth userAuth, Guid callerId)
at InProcessCrmService.Execute(Object request)
at PlatformCommand.ExecuteInternal()
at AssignRouteOnCreateUpdateListener.AssignEntity(Entity entity, LookupValue owner)
at CommunicationListener.HandlePostEvent(PlatformCommand command, Response response)
at PlatformCommand.ExecuteInternal()
at UpdateCommand.Execute()
at EntityProxy.Update(Boolean performDuplicateCheck)
at AppForm.HandleFormEventAssign(Boolean gridRefreshCallbackAdded)
at AppForm.RaiseDataEvent(FormEventId eventId)
at EndUserForm.Initialize(Entity entity)
at CustomizableForm.Execute(Entity entity, String formType)
at LeadDetailPage.ConfigureForm()
at AppUIPage.OnPreRender(EventArgs e)
at Control.PreRenderRecursiveInternal()
at Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
at Page.ProcessRequest(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
at Page.ProcessRequest()
at Page.ProcessRequest(HttpContext context)
at sfa_leads_edit_aspx.ProcessRequest(HttpContext context)
at CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
at HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)
at ApplicationStepManager.ResumeSteps(Exception error)
at HttpApplication.System.Web.IHttpAsyncHandler.BeginProcessRequest(HttpContext context, AsyncCallback cb, Object extraData)
at HttpRuntime.ProcessRequestInternal(HttpWorkerRequest wr)
at HttpRuntime.ProcessRequestNoDemand(HttpWorkerRequest wr)
at ISAPIRuntime.ProcessRequest(IntPtr ecb, Int32 iWRType)
>Crm Exception: Message: The user for which we are checking a privilege should be in the same org as the context provided, ErrorCode: -2147220989, InnerException: System.ArgumentException: The user for which we are checking a privilege should be in the same
org as the context provided
I checked the user id and the organization id, and there are both correct (in the database). The user id "fb56b107-949f-df11-a1b0-00237df0351e " is actually the internal CRM System User.
What could the issue be?
Can anyone help, please. Thanks

Are you sure, the User which you are assigning is in the same organisaion. It seems that the Orgname which you are specifying is not correct. and the web service is pointing to other user which is not the current ms crm organisaion.
Could you please paste your code here for more details.?
Thanks, Ranjitsingh R | http://mscrm-developer.blogspot.com/ | MS CRM Consultant

HANA DB User for ABAP/ Privileges on Users- Attach Debugger

Similar Messages

Maybe you are looking for