Fix local end user session grants and schema resolution

scenarios/07-audit-evidence-data-safe/sql/02_identities.sql

@@ -9,6 +9,10 @@ CREATE END USER payment_operator IDENTIFIED BY "Welcome1_DDS!";
 CREATE DATA ROLE audit_read_role;
 CREATE DATA ROLE payment_operator_role;
 
+CREATE ROLE audit_session_role;
+GRANT CREATE SESSION TO audit_session_role;
+GRANT audit_session_role TO audit_read_role;
+GRANT audit_session_role TO payment_operator_role;
+
 GRANT DATA ROLE audit_read_role TO auditor;
 GRANT DATA ROLE payment_operator_role TO payment_operator;
-

scenarios/07-audit-evidence-data-safe/sql/03_data_grants.sql

@@ -11,5 +11,7 @@ CREATE OR REPLACE DATA GRANT audit_payments_operator
   WHERE country = 'Brazil'
   TO payment_operator_role;
 
-SET USE DATA GRANTS ONLY ON dds_audit_payments ENABLED;
-
+BEGIN
+  EXECUTE IMMEDIATE 'SET USE DATA GRANTS ONLY ON dds_audit_payments ENABLED';
+END;
+/

scenarios/07-audit-evidence-data-safe/sql/05_generate_activity.sql

@@ -1,6 +1,8 @@
 SET PAGESIZE 100
 SET LINESIZE 220
 
+ALTER SESSION SET CURRENT_SCHEMA = ADMIN;
+
 PROMPT Generate auditable activity.
 
 SELECT payment_id, customer_name, country, payment_amount, card_token, risk_flag
@@ -19,4 +21,3 @@ FROM unified_audit_trail
 WHERE object_name = 'DDS_AUDIT_PAYMENTS'
 ORDER BY event_timestamp DESC
 FETCH FIRST 20 ROWS ONLY;
-

scenarios/07-audit-evidence-data-safe/sql/99_reset.sql

@@ -20,8 +20,9 @@ BEGIN EXECUTE IMMEDIATE 'DROP DATA ROLE audit_read_role'; EXCEPTION WHEN OTHERS
 /
 BEGIN EXECUTE IMMEDIATE 'DROP DATA ROLE payment_operator_role'; EXCEPTION WHEN OTHERS THEN NULL; END;
 /
+BEGIN EXECUTE IMMEDIATE 'DROP ROLE audit_session_role'; EXCEPTION WHEN OTHERS THEN NULL; END;
+/
 BEGIN EXECUTE IMMEDIATE 'DROP END USER auditor'; EXCEPTION WHEN OTHERS THEN NULL; END;
 /
 BEGIN EXECUTE IMMEDIATE 'DROP END USER payment_operator'; EXCEPTION WHEN OTHERS THEN NULL; END;
 /
-