Fix local end user session grants and schema resolution

scenarios/03-pii-row-column-cell/sql/02_identities.sql

@@ -8,8 +8,13 @@ CREATE DATA ROLE employee_role;
 CREATE DATA ROLE manager_role;
 CREATE DATA ROLE hr_role;
 
+CREATE ROLE pii_session_role;
+GRANT CREATE SESSION TO pii_session_role;
+GRANT pii_session_role TO employee_role;
+GRANT pii_session_role TO manager_role;
+GRANT pii_session_role TO hr_role;
+
 GRANT DATA ROLE employee_role TO emma;
 GRANT DATA ROLE employee_role TO marvin;
 GRANT DATA ROLE manager_role TO marvin;
 GRANT DATA ROLE hr_role TO victoria;
-

scenarios/03-pii-row-column-cell/sql/03_data_grants.sql

@@ -17,5 +17,7 @@ CREATE OR REPLACE DATA GRANT hr_all_employees
   ON dds_employees
   TO hr_role;
 
-SET USE DATA GRANTS ONLY ON dds_employees ENABLED;
-
+BEGIN
+  EXECUTE IMMEDIATE 'SET USE DATA GRANTS ONLY ON dds_employees ENABLED';
+END;
+/

scenarios/03-pii-row-column-cell/sql/04_test_queries.sql

@@ -1,6 +1,8 @@
 SET PAGESIZE 100
 SET LINESIZE 200
 
+ALTER SESSION SET CURRENT_SCHEMA = ADMIN;
+
 SELECT employee_id, first_name, last_name, email, manager, ssn, salary, phone
 FROM dds_employees
 ORDER BY employee_id;
@@ -10,4 +12,3 @@ SET phone = '555-9999'
 WHERE email = ORA_END_USER_CONTEXT.username;
 
 COMMIT;
-

scenarios/03-pii-row-column-cell/sql/99_reset.sql

@@ -14,10 +14,11 @@ BEGIN EXECUTE IMMEDIATE 'DROP DATA ROLE manager_role'; EXCEPTION WHEN OTHERS THE
 /
 BEGIN EXECUTE IMMEDIATE 'DROP DATA ROLE hr_role'; EXCEPTION WHEN OTHERS THEN NULL; END;
 /
+BEGIN EXECUTE IMMEDIATE 'DROP ROLE pii_session_role'; EXCEPTION WHEN OTHERS THEN NULL; END;
+/
 BEGIN EXECUTE IMMEDIATE 'DROP END USER emma'; EXCEPTION WHEN OTHERS THEN NULL; END;
 /
 BEGIN EXECUTE IMMEDIATE 'DROP END USER marvin'; EXCEPTION WHEN OTHERS THEN NULL; END;
 /
 BEGIN EXECUTE IMMEDIATE 'DROP END USER victoria'; EXCEPTION WHEN OTHERS THEN NULL; END;
 /
-