rodrigo.pace/oracle-deep-data-security-lab
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Improve Deep Data Security lab scenarios
Some checks failed
Repo Quality / structure (push) Has been cancelled
Details
Terraform Validate / validate (push) Has been cancelled
Details

Browse Source
This commit is contained in:
Rodrigo
2026-05-13 16:11:12 -03:00
parent 8314351c98
commit db3d68af10
134 changed files with 401 additions and 273 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
scenarios/05-legacy-app-ai-extension/sql/02_identities.sql Normal file → Executable file
View File

@@ -22,6 +22,17 @@ GRANT legacy_ai_session_role TO legacy_brazil_manager_role;
GRANT legacy_ai_session_role TO legacy_support_role;
GRANT legacy_ai_session_role TO legacy_legal_role;
-- Vulnerable baseline: this broad legacy role simulates an AI agent attached to
-- a legacy application that reuses direct table privileges before DDS is enforced.
CREATE ROLE legacy_ai_broad_access_role;
GRANT SELECT ON dds_legacy_customers TO legacy_ai_broad_access_role;
GRANT SELECT ON dds_legacy_contracts TO legacy_ai_broad_access_role;
GRANT SELECT ON dds_legacy_tickets TO legacy_ai_broad_access_role;
GRANT legacy_ai_broad_access_role TO legacy_sales_rep_role;
GRANT legacy_ai_broad_access_role TO legacy_brazil_manager_role;
GRANT legacy_ai_broad_access_role TO legacy_support_role;
GRANT legacy_ai_broad_access_role TO legacy_legal_role;
GRANT DATA ROLE legacy_sales_rep_role TO joao;
GRANT DATA ROLE legacy_brazil_manager_role TO ana;
GRANT DATA ROLE legacy_support_role TO maria;