rodrigo.pace/oracle-deep-data-security-lab
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix local end user session grants and schema resolution
Some checks failed
Repo Quality / structure (push) Has been cancelled
Details

Browse Source
This commit is contained in:
Rodrigo Pace
2026-05-13 14:49:12 -03:00
parent 52bf971b8b
commit 8314351c98
28 changed files with 99 additions and 37 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
scenarios/05-legacy-app-ai-extension/sql/02_identities.sql
View File

@@ -15,8 +15,14 @@ CREATE DATA ROLE legacy_brazil_manager_role;
CREATE DATA ROLE legacy_support_role;
CREATE DATA ROLE legacy_legal_role;
CREATE ROLE legacy_ai_session_role;
GRANT CREATE SESSION TO legacy_ai_session_role;
GRANT legacy_ai_session_role TO legacy_sales_rep_role;
GRANT legacy_ai_session_role TO legacy_brazil_manager_role;
GRANT legacy_ai_session_role TO legacy_support_role;
GRANT legacy_ai_session_role TO legacy_legal_role;
GRANT DATA ROLE legacy_sales_rep_role TO joao;
GRANT DATA ROLE legacy_brazil_manager_role TO ana;
GRANT DATA ROLE legacy_support_role TO maria;
GRANT DATA ROLE legacy_legal_role TO sofia;

10
scenarios/05-legacy-app-ai-extension/sql/03_data_grants.sql
View File

@@ -48,7 +48,9 @@ CREATE OR REPLACE DATA GRANT legacy_support_ticket_access
WHERE assigned_group = 'SUPPORT'
TO legacy_support_role;
SET USE DATA GRANTS ONLY ON dds_legacy_customers ENABLED;
SET USE DATA GRANTS ONLY ON dds_legacy_contracts ENABLED;
SET USE DATA GRANTS ONLY ON dds_legacy_tickets ENABLED;
BEGIN
EXECUTE IMMEDIATE 'SET USE DATA GRANTS ONLY ON dds_legacy_customers ENABLED';
EXECUTE IMMEDIATE 'SET USE DATA GRANTS ONLY ON dds_legacy_contracts ENABLED';
EXECUTE IMMEDIATE 'SET USE DATA GRANTS ONLY ON dds_legacy_tickets ENABLED';
END;
/

3
scenarios/05-legacy-app-ai-extension/sql/04_test_queries.sql
View File

@@ -1,6 +1,8 @@
SET PAGESIZE 100
SET LINESIZE 220
ALTER SESSION SET CURRENT_SCHEMA = ADMIN;
PROMPT Agent AI question: "List all high-risk customers, margin, legal holds, renewals and support notes."
SELECT customer_id, customer_name, country, region, account_owner, risk_rating, revenue, margin, legal_hold
@@ -15,4 +17,3 @@ ORDER BY c.contract_id;
SELECT ticket_id, customer_id, assigned_group, severity, summary, private_note
FROM dds_legacy_tickets
ORDER BY ticket_id;

3
scenarios/05-legacy-app-ai-extension/sql/99_reset.sql
View File

@@ -36,6 +36,8 @@ BEGIN EXECUTE IMMEDIATE 'DROP DATA ROLE legacy_support_role'; EXCEPTION WHEN OTH
/
BEGIN EXECUTE IMMEDIATE 'DROP DATA ROLE legacy_legal_role'; EXCEPTION WHEN OTHERS THEN NULL; END;
/
BEGIN EXECUTE IMMEDIATE 'DROP ROLE legacy_ai_session_role'; EXCEPTION WHEN OTHERS THEN NULL; END;
/
BEGIN EXECUTE IMMEDIATE 'DROP END USER joao'; EXCEPTION WHEN OTHERS THEN NULL; END;
/
BEGIN EXECUTE IMMEDIATE 'DROP END USER ana'; EXCEPTION WHEN OTHERS THEN NULL; END;
@@ -44,4 +46,3 @@ BEGIN EXECUTE IMMEDIATE 'DROP END USER maria'; EXCEPTION WHEN OTHERS THEN NULL;
/
BEGIN EXECUTE IMMEDIATE 'DROP END USER sofia'; EXCEPTION WHEN OTHERS THEN NULL; END;
/