Files
oracle-deep-data-security-lab/scenarios/03-pii-row-column-cell/sql/03_data_grants.sql
Rodrigo db3d68af10
Some checks failed
Repo Quality / structure (push) Has been cancelled
Terraform Validate / validate (push) Has been cancelled
Improve Deep Data Security lab scenarios
2026-05-13 16:13:04 -03:00

24 lines
571 B
SQL
Executable File

WHENEVER SQLERROR EXIT SQL.SQLCODE
CREATE OR REPLACE DATA GRANT employees_own_record
AS SELECT, UPDATE (phone)
ON dds_employees
WHERE email = ORA_END_USER_CONTEXT.username
TO employee_role;
CREATE OR REPLACE DATA GRANT manager_direct_reports
AS SELECT (ALL COLUMNS EXCEPT ssn), UPDATE (salary)
ON dds_employees
WHERE manager = ORA_END_USER_CONTEXT.username
TO manager_role;
CREATE OR REPLACE DATA GRANT hr_all_employees
AS SELECT
ON dds_employees
TO hr_role;
BEGIN
EXECUTE IMMEDIATE 'SET USE DATA GRANTS ONLY ON dds_employees ENABLED';
END;
/