rodrigo.pace/oracle-deep-data-security-lab
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Initial Oracle Deep Data Security lab kit
Some checks failed
Repo Quality / structure (push) Has been cancelled
Details
Terraform Validate / validate (push) Has been cancelled
Details

Browse Source
This commit is contained in:
Rodrigo Pace
2026-05-08 12:08:05 -03:00
commit 5cd8752a90
88 changed files with 2189 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
scenarios/02-shared-app-account/sql/00_schema.sql Normal file
View File

@@ -0,0 +1,11 @@
WHENEVER SQLERROR EXIT SQL.SQLCODE
CREATE TABLE dds_orders (
order_id NUMBER GENERATED BY DEFAULT AS IDENTITY PRIMARY KEY,
customer_name VARCHAR2(100) NOT NULL,
region VARCHAR2(30) NOT NULL,
seller VARCHAR2(60) NOT NULL,
amount NUMBER(12,2) NOT NULL,
margin NUMBER(12,2) NOT NULL
);

9
scenarios/02-shared-app-account/sql/01_seed_data.sql Normal file
View File

@@ -0,0 +1,9 @@
WHENEVER SQLERROR EXIT SQL.SQLCODE
INSERT INTO dds_orders (customer_name, region, seller, amount, margin) VALUES ('Acme Brasil', 'LATAM', 'alice', 10000, 2100);
INSERT INTO dds_orders (customer_name, region, seller, amount, margin) VALUES ('Andes Retail', 'LATAM', 'alice', 15000, 3200);
INSERT INTO dds_orders (customer_name, region, seller, amount, margin) VALUES ('Northwind US', 'NA', 'natalie', 18000, 5000);
INSERT INTO dds_orders (customer_name, region, seller, amount, margin) VALUES ('Euro Health', 'EMEA', 'erik', 21000, 6100);
COMMIT;

14
scenarios/02-shared-app-account/sql/02_identities.sql Normal file
View File

@@ -0,0 +1,14 @@
WHENEVER SQLERROR EXIT SQL.SQLCODE
CREATE END USER alice IDENTIFIED BY "Welcome1_DDS!";
CREATE END USER bruno IDENTIFIED BY "Welcome1_DDS!";
CREATE DATA ROLE seller_role;
CREATE DATA ROLE latam_manager_role;
GRANT DATA ROLE seller_role TO alice;
GRANT DATA ROLE latam_manager_role TO bruno;
CREATE USER dds_app IDENTIFIED BY "Welcome1_DDS_App!" ACCOUNT UNLOCK;
GRANT CREATE SESSION TO dds_app;

16
scenarios/02-shared-app-account/sql/03_data_grants.sql Normal file
View File

@@ -0,0 +1,16 @@
WHENEVER SQLERROR EXIT SQL.SQLCODE
CREATE OR REPLACE DATA GRANT seller_own_orders
AS SELECT (order_id, customer_name, region, seller, amount)
ON dds_orders
WHERE seller = ORA_END_USER_CONTEXT.username
TO seller_role;
CREATE OR REPLACE DATA GRANT latam_manager_orders
AS SELECT
ON dds_orders
WHERE region = 'LATAM'
TO latam_manager_role;
SET USE DATA GRANTS ONLY ON dds_orders ENABLED;

7
scenarios/02-shared-app-account/sql/04_test_queries.sql Normal file
View File

@@ -0,0 +1,7 @@
SET PAGESIZE 100
SET LINESIZE 200
SELECT order_id, customer_name, region, seller, amount, margin
FROM dds_orders
ORDER BY order_id;

19
scenarios/02-shared-app-account/sql/99_reset.sql Normal file
View File

@@ -0,0 +1,19 @@
BEGIN EXECUTE IMMEDIATE 'SET USE DATA GRANTS ONLY ON dds_orders DISABLED'; EXCEPTION WHEN OTHERS THEN NULL; END;
/
BEGIN EXECUTE IMMEDIATE 'DROP DATA GRANT seller_own_orders'; EXCEPTION WHEN OTHERS THEN NULL; END;
/
BEGIN EXECUTE IMMEDIATE 'DROP DATA GRANT latam_manager_orders'; EXCEPTION WHEN OTHERS THEN NULL; END;
/
BEGIN EXECUTE IMMEDIATE 'DROP TABLE dds_orders PURGE'; EXCEPTION WHEN OTHERS THEN NULL; END;
/
BEGIN EXECUTE IMMEDIATE 'DROP USER dds_app CASCADE'; EXCEPTION WHEN OTHERS THEN NULL; END;
/
BEGIN EXECUTE IMMEDIATE 'DROP DATA ROLE seller_role'; EXCEPTION WHEN OTHERS THEN NULL; END;
/
BEGIN EXECUTE IMMEDIATE 'DROP DATA ROLE latam_manager_role'; EXCEPTION WHEN OTHERS THEN NULL; END;
/
BEGIN EXECUTE IMMEDIATE 'DROP END USER alice'; EXCEPTION WHEN OTHERS THEN NULL; END;
/
BEGIN EXECUTE IMMEDIATE 'DROP END USER bruno'; EXCEPTION WHEN OTHERS THEN NULL; END;
/