29 lines
1.2 KiB
SQL
29 lines
1.2 KiB
SQL
-- ============================================================
|
|
-- 34_agent_ords_execution_evidence_grant.sql
|
|
-- Enable SQL_ID and DBMS_XPLAN evidence for VPD probe requests.
|
|
--
|
|
-- Run as SYS or a DBA account that can grant SYS.V_$ dynamic-performance
|
|
-- views. Typical Autonomous ADMIN accounts cannot delegate these views.
|
|
-- The grants are read-only and scoped to the BACKOFFICE_DB_USERNAME account
|
|
-- that displays the evidence (for example, ADMIN). They do not grant table
|
|
-- DML or alter DBMS_RLS enforcement.
|
|
-- ============================================================
|
|
WHENEVER SQLERROR EXIT SQL.SQLCODE
|
|
SET ECHO ON
|
|
SET FEEDBACK ON
|
|
|
|
-- Change ADMIN when BACKOFFICE_DB_USERNAME uses a dedicated observer account.
|
|
DEFINE diagnostic_user = ADMIN
|
|
|
|
PROMPT === Granting backoffice cursor-evidence read access ===
|
|
GRANT SELECT ON V_$SQL TO &diagnostic_user;
|
|
GRANT SELECT ON V_$SQL_PLAN TO &diagnostic_user;
|
|
GRANT SELECT ON V_$SQL_PLAN_STATISTICS_ALL TO &diagnostic_user;
|
|
GRANT SELECT ON V_$SESSION TO &diagnostic_user;
|
|
GRANT EXECUTE ON DBMS_XPLAN TO &diagnostic_user;
|
|
|
|
PROMPT === Backoffice cursor-evidence grants ready ===
|
|
PROMPT SQL_ID evidence will appear after the next /probe call.
|
|
UNDEFINE diagnostic_user
|
|
EXIT;
|