devmrko
65a2b27fcc
refs #729 : seed RDS carrier performance demo
2026-07-24 14:04:42 +09:00
devmrko
da80041bcb
refs #707 : enforce HMM leave team VPD
2026-07-23 13:36:21 +09:00
devmrko
64965c294b
feat(backoffice): retain access policy with Smilegate tables
2026-07-22 13:44:09 +09:00
devmrko
ea5a116203
feat(backoffice): add Smilegate identity administration
2026-07-22 13:29:47 +09:00
devmrko
b5d3913de3
fix(backoffice): mark seeded tool passwords as bcrypt
2026-07-22 13:16:25 +09:00
devmrko
79ed5a158e
feat(backoffice): authenticate Smilegate tool users from ADB
2026-07-22 13:11:50 +09:00
devmrko
e18b30feab
Consolidate data access control backoffice updates
2026-07-13 23:07:09 +09:00
devmrko
403298d474
[DBA] add KB VPD admin full access condition
2026-07-08 13:02:11 +09:00
devmrko
fbeb18ccec
[Developer] align Select AI ORDS runtime route
2026-07-08 10:37:51 +09:00
devmrko
61f7e4c775
[Developer] add KB Select AI Team ORDS MCP tool
2026-07-08 06:43:29 +09:00
devmrko
1cb8052045
[DBA] restore KB VPD after table reload
2026-07-07 18:47:10 +09:00
devmrko
2ef04e6ab2
[Developer] #619 focus POC on KB VPD permissions
2026-07-07 16:02:22 +09:00
devmrko
ef944a6758
[Developer] #619 map VPD rules to token context variables
2026-07-07 14:24:50 +09:00
devmrko
2cdc738eb9
[Developer] #619 map stakeholder tokens to permission rules
2026-07-07 14:03:40 +09:00
devmrko
8e1e521a70
[Developer] #546 make VPD setup rerunnable on ADB
2026-07-07 13:14:31 +09:00
devmrko
ef1331be4b
[Developer] #617 apply DDS MCP end-user authorization
2026-07-02 09:34:58 +09:00
devmrko
ebcce66bf7
[Developer] #567 record actual VPD execution with FGA
2026-07-01 16:02:03 +09:00
devmrko
1c66b973a7
[Developer] #567 use backoffice account for SQL evidence
2026-07-01 14:59:22 +09:00
devmrko
bf393bffa5
[Developer] #567 add VPD SQL execution evidence
2026-07-01 13:47:30 +09:00
devmrko
22a7eda219
feat: record DDS protection evidence
2026-06-30 20:56:52 +09:00
devmrko
28379c47f8
[Developer] #576 clarify verification user names
2026-06-30 17:41:11 +09:00
devmrko
e0fbf1e0c5
[Developer] #573 normalize vector access whitelist
2026-06-30 16:33:59 +09:00
devmrko
04cca64f10
feat: center DDS demo on sales knowledge authorization
2026-06-30 14:21:39 +09:00
devmrko
188b398dcb
[Developer] #570 show vector VPD effective SQL trace
2026-06-30 14:16:42 +09:00
devmrko
a5e70bcff1
feat: enforce DDS token access through common grants
2026-06-30 13:20:00 +09:00
devmrko
3a07788e5c
[Developer] #567 expose VPD effective SQL trace
2026-06-30 11:40:02 +09:00
devmrko
1e48864bce
feat: publish application permissions to DDS grants
2026-06-30 07:51:36 +09:00
devmrko
2e4bcef44f
feat: align DDS with common permission and vector flow
2026-06-29 23:50:42 +09:00
devmrko
e7ca656a0f
feat: make DDS demo data plane independent
2026-06-29 22:21:41 +09:00
devmrko
b674d301db
fix #565 : read ORDS vector body stream once
2026-06-29 20:20:59 +09:00
devmrko
4ba6a57835
feat #565 : add vector knowledge ingestion demo
2026-06-29 18:11:16 +09:00
devmrko
908ac9a386
fix #557 : guide permission-driven VPD flow
2026-06-29 12:11:25 +09:00
devmrko
1ea8d34f31
fix #477 : add group based role grants
2026-06-26 09:33:49 +09:00
devmrko
4961083f06
feat #467 : separate column sensitivity policies
2026-06-25 22:36:33 +09:00
devmrko
d6c7533edd
feat #466 : add deny permission effect
2026-06-25 22:24:18 +09:00
devmrko
8fddf1033e
test #462 : add VPD predicate injection checks
2026-06-25 22:05:24 +09:00
devmrko
d97dab34bd
fix #456 : add VPD predicate rule tests
2026-06-25 21:21:48 +09:00
devmrko
5eaffd6229
fix #424 : build VPD filter from stored row rules
2026-06-25 18:21:58 +09:00
devmrko
4d662f7a36
fix #424 : set VPD context before ORDS query cursors
2026-06-25 16:19:26 +09:00
devmrko
079f5a9678
[Developer] #424 preserve ORDS templates and force auth context
2026-06-25 16:08:58 +09:00
devmrko
bea010adff
[Developer] #424 use ORDS query handlers for object reads
2026-06-25 14:56:53 +09:00
devmrko
5032eed56a
[Developer] #424 fix ORDS JSON response output
2026-06-23 15:41:38 +09:00
devmrko
014e6eb3ec
[Developer] #424 remove probe wrappers from ORDS handler package
2026-06-23 15:37:20 +09:00
devmrko
46300e0168
[Developer] #424 separate ORDS auth context from object queries
2026-06-23 15:31:12 +09:00
devmrko
09e25a2349
[Developer] #424 support object column row rules
...
Refs #424
2026-06-23 14:24:00 +09:00
devmrko
b6fcc768a3
[Developer] #424 move sensitive column access to permissions
...
Refs #424
2026-06-23 13:37:43 +09:00
devmrko
127110e300
[Developer] #424 fix ORDS protected object path
...
Refs #424
2026-06-23 12:04:44 +09:00
devmrko
923daa2a56
[Developer] #424 add editable ORDS settings
...
Refs #424
2026-06-23 11:59:58 +09:00
devmrko
7b45b3a028
[Developer] #424 implement VPD ORDS backoffice
...
Refs #424
2026-06-23 11:04:46 +09:00
devmrko
1f4a9c7e64
Wire DDS variant into run.sh as optional subcommands
...
Adds dds / dds-setup / dds-tests / dds-teardown subcommands so the
26ai Deep Data Security variant can be run from the same one-click
entry point. Not part of `./run.sh all` since DDS requires 26ai
(23.26.2+) which not every ADB has.
- sql/adb/14_tests_dds_user.sql: shared verification script for all
4 ddsuser_*; uses WHENEVER SQLERROR CONTINUE so the expected
ORA-00942 (deny-by-hiding) doesn't abort the script. Includes
bypass attempts against the underlying VPD views, raw DB Links,
and the VPD permission tables.
- sql/adb/15_dds_cleanup.sql: idempotent teardown for DDS objects
(data grants, end users, data roles, dds_db_role, DDS-only views).
- run.sh: do_dds_prereq / do_dds_setup / do_dds_tests /
do_dds_teardown helpers; dispatch case extended.
Also fixes a pre-existing secrets-leak gap: both 07_end_users.sql
and 13_dds_variant.sql had SET DEFINE ON without SET VERIFY OFF,
which causes sqlplus to echo the substituted DDL (including the
IDENTIFIED BY <password> clause) on the `new 1:` line. Added
SET VERIFY OFF.
E2E re-verified on ADB 23.26.2.2.0: matrix identical to manual run
(MY=17 / PG=12 / BOTH=12+17 / NONE=ORA-00942 on both), no password
in logs, dds-teardown leaves no residue.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-05-26 15:53:15 +09:00
