Technical Articles
How to resolve error 403 – Forbidden when accessing HANA web-based development workbench
Prerequisites:
You already have a HANA database running in your SCP trial account.
Overview:
In this blog post, I will discuss a common problem which a developer face when accessing HANA Web-based development workbench.
After creating a HANA DB instance, when you want to access the catalog to create, edit, execute or manage HANA DB artifacts, you might have come across an error as below.
If you face this error, then please follow these steps:
- Go to SAP HANA Cockpit link in SCP
2. Once you are successfully logged in, you will see this workbench menu, Go to Security
3. When prompted, enter user name as ‘SYSTEM’ and password which you provided at the time of creating new DB/Schema.
4. Add the following roles for user ‘SYSTEM’ and save
| Tool | Description | Required Role |
|---|---|---|
| Editor | Inspect, create, change, delete and activate SAP HANA repository objects | sap.hana.ide.roles::EditorDeveloper |
| Debug server-side JavaScript code | sap.hana.xs.debugger::Debugger | |
| Catalog | Create, edit, execute and manage SQL catalog artifacts in the SAP HANA database | sap.hana.ide.roles::CatalogDeveloper |
| Security | Create users and user roles | sap.hana.ide.roles::SecurityAdmin |
| Traces | View and download SAP HANA trace files and set trace levels | sap.hana.ide.roles::TraceViewer |
5. Now switch to ‘Catalog’ using the navigation link.
Conclusion:
Once you have followed the steps mentioned in this blog post, you should be able to access the Catalog or Editor and manage HANA artifacts.
Hope this blog post was helpful to you!!
Hello
This is a useful tip, but as using the SYSTEM user for development isn't recommended, adding a new user and granting them the roles you show above would be the recommended approach.
Michael
Thank you for your suggestion Michael, I will make the required changes.
Hello,
I am facing the issue "403 - Forbidden" when accessing HANA Web-based development workbench, so I followed this blog and wanted to add the mentioned roles. Unfortunately, I am not able to assign these roles to any user, following example with user "TEST_USER" even I try to assign these roles with user "System".
Could not execute 'grant "sap.hana.ide.roles::EditorDeveloper" to TEST_USER'
Error: (dberror) [258]: insufficient privilege: Cannot grant activated roles: line 1 col 6 (at pos 6)
Which permission is needed to grant these permissions again. I am spinning in circles. 😉
Thanks and best regards
Jan Hofmann