How To Fix RS2HANA_CHECK095 - Mapped DMBS users can access the generated SAP HANA view directly: No

SAP Error Message - Details

• Message type: E = Error

• Message class: RS2HANA_CHECK - RS2HANA Check Report

• Message number: 095

• Message text: Mapped DMBS users can access the generated SAP HANA view directly: No

X: Direct access to generated SAP HANA views is enabled
' ' (blank): Direct access to generated SAP HANA views is disabled

The system issues an error message and will not allow you to continue with this transaction until the error is resolved.

<ZH>IMPORTANT: </>After changing the setting<(>,<)> you have to remove
all generated authorizations and then replicate all authorizations again
for all InfoProviders and BW users. You can do this either using report
RS2HANA_AUTH_RUN or the process chain.

Procedure for System Administrators

parameter I_ASSIGN_VIEW_ACCESS_PRIV as follows:
of class CL_RS2HANA_VIEW_SETTINGS in transaction SE24 and filling
transaction RS2HANA_VIEW, by running method SET_ASSIGN_VIEW_ACCESS_PRIV
using transaction RS2HANA_VIEW or, if the setting is not available in
If required, change the setting accordingly. This can be done either by

How to fix this error?

System Response

manually created view.
All DBMS users must be assigned privileges in order to access the
provide a view of your own built on top of the generated SAP HANA view.
generated SAP HANA view of an InfoProvider directly. Instead you have to
views enabled</>. This prevents all mapped DBMS users from accessing the
You have disabled the setting <ZH>Direct access to generated SAP HANA

What causes this issue?

Error message extract from SAP system. Copyright SAP SE.

Smart SAP Assistant

• What is the cause and solution for SAP error message RS2HANA_CHECK095 - Mapped DMBS users can access the generated SAP HANA view directly: No ?

  The SAP error message RS2HANA_CHECK095 indicates that mapped DBMS (Database Management System) users are able to access the generated SAP HANA view directly, which is not the intended behavior. This error typically arises in the context of SAP BW (Business Warehouse) when using SAP HANA as the database.
  Cause:
  The error is triggered when the security settings for the SAP HANA views do not restrict access appropriately. This can happen due to:
  
  Insufficient Authorization Settings: The mapped users may have been granted permissions that allow them to access the HANA views directly, bypassing the intended security model.
  Configuration Issues: There may be misconfigurations in the BW/4HANA or HANA system that allow direct access to the views.
  User Mapping Issues: The mapping of BW users to HANA users may not be set up correctly, leading to unintended access.
  
  Solution:
  To resolve this issue, you can take the following steps:
  
  
  Review User Authorizations:
  
  Check the authorizations assigned to the mapped DBMS users in the SAP HANA system.
  Ensure that these users do not have direct access to the HANA views unless explicitly required.
  
  
  
  Adjust Security Settings:
  
  Modify the security settings for the HANA views to restrict access. This can include setting up roles and privileges that limit who can access the views.
  Use the SAP HANA Studio or SAP HANA Cockpit to manage user roles and privileges.
  
  
  
  Check User Mapping:
  
  Verify the user mapping configuration in the BW system to ensure that it aligns with your security requirements.
  Ensure that the mapping does not inadvertently grant excessive permissions.
  
  
  
  Implement Row-Level Security:
  
  If applicable, implement row-level security in HANA to control access to data based on user roles.
  
  
  
  Consult Documentation:
  
  Refer to SAP documentation for best practices on securing HANA views and managing user access.
  
  
  
  Testing:
  
  After making changes, test the access of the mapped users to ensure that they can no longer access the HANA views directly.
  
  
  
  Related Information:
  
  SAP Notes: Check for any relevant SAP Notes that may address this specific error or provide additional guidance on security configurations.
  SAP Community: Engage with the SAP Community forums to see if other users have encountered similar issues and what solutions they have implemented.
  SAP BW/4HANA Documentation: Review the official SAP BW/4HANA documentation for information on user management and security best practices.
  
  By following these steps, you should be able to resolve the RS2HANA_CHECK095 error and ensure that your SAP HANA views are secured appropriately.