WHENEVER SQLERROR EXIT SQL.SQLCODE

CREATE OR REPLACE DATA GRANT audit_payments_read_all
  AS SELECT
  ON dds_audit_payments
  TO audit_read_role;

CREATE OR REPLACE DATA GRANT audit_payments_operator
  AS SELECT (payment_id, customer_name, country, payment_amount, risk_flag)
  ON dds_audit_payments
  WHERE country = 'Brazil'
  TO payment_operator_role;

SET USE DATA GRANTS ONLY ON dds_audit_payments ENABLED;

