rodrigo.pace/oracle-deep-data-security-lab
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix local end user session grants and schema resolution
Some checks failed
Repo Quality / structure (push) Has been cancelled
Details

Browse Source
This commit is contained in:
Rodrigo Pace
2026-05-13 14:49:12 -03:00
parent 52bf971b8b
commit 8314351c98
28 changed files with 99 additions and 37 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
scenarios/06-rag-vector-classified-docs/sql/02_identities.sql
View File

@@ -10,8 +10,14 @@ CREATE DATA ROLE rag_hr_role;
CREATE DATA ROLE rag_legal_role;
CREATE DATA ROLE rag_exec_role;
CREATE ROLE rag_session_role;
GRANT CREATE SESSION TO rag_session_role;
GRANT rag_session_role TO rag_employee_role;
GRANT rag_session_role TO rag_hr_role;
GRANT rag_session_role TO rag_legal_role;
GRANT rag_session_role TO rag_exec_role;
GRANT DATA ROLE rag_employee_role TO nina;
GRANT DATA ROLE rag_hr_role TO heitor;
GRANT DATA ROLE rag_legal_role TO sofia;
GRANT DATA ROLE rag_exec_role TO carlos;

6
scenarios/06-rag-vector-classified-docs/sql/03_data_grants.sql
View File

@@ -23,5 +23,7 @@ CREATE OR REPLACE DATA GRANT rag_exec_docs
ON dds_rag_chunks
TO rag_exec_role;
SET USE DATA GRANTS ONLY ON dds_rag_chunks ENABLED;
BEGIN
EXECUTE IMMEDIATE 'SET USE DATA GRANTS ONLY ON dds_rag_chunks ENABLED';
END;
/

3
scenarios/06-rag-vector-classified-docs/sql/04_test_queries.sql
View File

@@ -1,6 +1,8 @@
SET PAGESIZE 100
SET LINESIZE 220
ALTER SESSION SET CURRENT_SCHEMA = ADMIN;
PROMPT RAG retrieval simulation: retrieve chunks closest to the question embedding.
SELECT chunk_id,
@@ -12,4 +14,3 @@ SELECT chunk_id,
FROM dds_rag_chunks
ORDER BY distance
FETCH FIRST 5 ROWS ONLY;

3
scenarios/06-rag-vector-classified-docs/sql/99_reset.sql
View File

@@ -18,6 +18,8 @@ BEGIN EXECUTE IMMEDIATE 'DROP DATA ROLE rag_legal_role'; EXCEPTION WHEN OTHERS T
/
BEGIN EXECUTE IMMEDIATE 'DROP DATA ROLE rag_exec_role'; EXCEPTION WHEN OTHERS THEN NULL; END;
/
BEGIN EXECUTE IMMEDIATE 'DROP ROLE rag_session_role'; EXCEPTION WHEN OTHERS THEN NULL; END;
/
BEGIN EXECUTE IMMEDIATE 'DROP END USER nina'; EXCEPTION WHEN OTHERS THEN NULL; END;
/
BEGIN EXECUTE IMMEDIATE 'DROP END USER heitor'; EXCEPTION WHEN OTHERS THEN NULL; END;
@@ -26,4 +28,3 @@ BEGIN EXECUTE IMMEDIATE 'DROP END USER sofia'; EXCEPTION WHEN OTHERS THEN NULL;
/
BEGIN EXECUTE IMMEDIATE 'DROP END USER carlos'; EXCEPTION WHEN OTHERS THEN NULL; END;
/