How to enforce user access control when exposing OData tables

Hi all,

I'm the phase of architecture definition for a web application.

One of the options is to develop a UI5 application which consumes OData services exposed by HANA.

One of the key points is that users should be able to CRUD only a specific dataset, e.g. only db rows related to their department.

The "Department" information might be stored somewhere else, e.g. in an ABAP system containing master data of users.

This ABAP system might expose such information through a SOAP WebService or similar integration scenario.

As a consequence, the OData services should be able to enforce such an access control logic under the hood, invoking the ABAP system to check user details and "Department", for instance.

After thorough research, I found no real way to implement this behavior and I'm considering to move the whole application to Java and use HANA as a plain RDBMS.

Can anyone please suggest any way on how that could be done?

Thanks in advance

Regards

Vincenzo