How to resolve error 403 – Forbidden when accessing HANA web-based development workbench
You already have a HANA database running in your SCP trial account.
In this blog post, I will discuss a common problem which a developer face when accessing HANA Web-based development workbench.
After creating a HANA DB instance, when you want to access the catalog to create, edit, execute or manage HANA DB artifacts, you might have come across an error as below.
If you face this error, then please follow these steps:
- Go to SAP HANA Cockpit link in SCP
2. Once you are successfully logged in, you will see this workbench menu, Go to Security
3. When prompted, enter user name as ‘SYSTEM’ and password which you provided at the time of creating new DB/Schema.
4. Add the following roles for user ‘SYSTEM’ and save
|Editor||Inspect, create, change, delete and activate SAP HANA repository objects||sap.hana.ide.roles::EditorDeveloper|
|Catalog||Create, edit, execute and manage SQL catalog artifacts in the SAP HANA database||sap.hana.ide.roles::CatalogDeveloper|
|Security||Create users and user roles||sap.hana.ide.roles::SecurityAdmin|
|Traces||View and download SAP HANA trace files and set trace levels||sap.hana.ide.roles::TraceViewer|
5. Now switch to ‘Catalog’ using the navigation link.
Once you have followed the steps mentioned in this blog post, you should be able to access the Catalog or Editor and manage HANA artifacts.
Hope this blog post was helpful to you!!
This is a useful tip, but as using the SYSTEM user for development isn't recommended, adding a new user and granting them the roles you show above would be the recommended approach.
Thank you for your suggestion Michael, I will make the required changes.
I am facing the issue "403 - Forbidden" when accessing HANA Web-based development workbench, so I followed this blog and wanted to add the mentioned roles. Unfortunately, I am not able to assign these roles to any user, following example with user "TEST_USER" even I try to assign these roles with user "System".
Could not execute 'grant "sap.hana.ide.roles::EditorDeveloper" to TEST_USER'
Error: (dberror) : insufficient privilege: Cannot grant activated roles: line 1 col 6 (at pos 6)
Which permission is needed to grant these permissions again. I am spinning in circles. 😉
Thanks and best regards