refs #741 #742: reorganize repository by application

database/adb/34_agent_ords_execution_evidence_grant.sql

@@ -0,0 +1,28 @@
+-- ============================================================
+-- 34_agent_ords_execution_evidence_grant.sql
+-- Enable SQL_ID and DBMS_XPLAN evidence for VPD probe requests.
+--
+-- Run as SYS or a DBA account that can grant SYS.V_$ dynamic-performance
+-- views. Typical Autonomous ADMIN accounts cannot delegate these views.
+-- The grants are read-only and scoped to the BACKOFFICE_DB_USERNAME account
+-- that displays the evidence (for example, ADMIN). They do not grant table
+-- DML or alter DBMS_RLS enforcement.
+-- ============================================================
+WHENEVER SQLERROR EXIT SQL.SQLCODE
+SET ECHO ON
+SET FEEDBACK ON
+
+-- Change ADMIN when BACKOFFICE_DB_USERNAME uses a dedicated observer account.
+DEFINE diagnostic_user = ADMIN
+
+PROMPT === Granting backoffice cursor-evidence read access ===
+GRANT SELECT ON V_$SQL TO &diagnostic_user;
+GRANT SELECT ON V_$SQL_PLAN TO &diagnostic_user;
+GRANT SELECT ON V_$SQL_PLAN_STATISTICS_ALL TO &diagnostic_user;
+GRANT SELECT ON V_$SESSION TO &diagnostic_user;
+GRANT EXECUTE ON DBMS_XPLAN TO &diagnostic_user;
+
+PROMPT === Backoffice cursor-evidence grants ready ===
+PROMPT SQL_ID evidence will appear after the next /probe call.
+UNDEFINE diagnostic_user
+EXIT;