Files
oracle-deep-data-security-lab/scenarios/03-pii-row-column-cell/sql/03_data_grants.sql
Rodrigo 07390ff902
Some checks failed
Repo Quality / structure (push) Has been cancelled
Fix PII lab persona tests
2026-05-18 12:02:13 -03:00

24 lines
585 B
SQL
Executable File

WHENEVER SQLERROR EXIT SQL.SQLCODE
CREATE OR REPLACE DATA GRANT employees_own_record
AS SELECT, UPDATE (phone)
ON dds_employees
WHERE UPPER(email) = ORA_END_USER_CONTEXT.username
TO employee_role;
CREATE OR REPLACE DATA GRANT manager_direct_reports
AS SELECT (ALL COLUMNS EXCEPT ssn), UPDATE (salary)
ON dds_employees
WHERE UPPER(manager) = ORA_END_USER_CONTEXT.username
TO manager_role;
CREATE OR REPLACE DATA GRANT hr_all_employees
AS SELECT
ON dds_employees
TO hr_role;
BEGIN
EXECUTE IMMEDIATE 'SET USE DATA GRANTS ONLY ON dds_employees ENABLED';
END;
/