Fix for #139

- Manage object privs for a schema/role
- privs are managed in the format:
  - privs:owner.object_name
  - select,update:appschema1.table1
  - execute:appschema1.package_name

e.g
users:
      - schema: appuser1
        default_tablespace: appuser1_data
        grants:
           - approle1
        object_privs:
            - execute:sys.dbms_lock
            - select:sys.dba_pending_transactions
        state: present

Author: oravirt

roles/oradb-manage-grants/tasks/main.yml

@@ -4,7 +4,8 @@
   oracle_grants:
           role={{ item.1.name }}
           state={{ item.1.state }}
-          grants={{ item.1.grants }}
+          grants={{ item.1.grants |default(omit)  }}
+          object_privs={{ item.1.object_privs | default (omit) }}
           hostname={{ ansible_hostname }}
           port={{ listener_port_template }}
           service_name={{ db_service_name }}
@@ -17,18 +18,19 @@
       - flags:
         skip_missing: True
   environment: "{{oracle_env}}"
-  when: oracle_databases is defined and item.0.state|lower == 'present' and item.1.grants is defined
+  when: oracle_databases is defined and item.0.state|lower == 'present' and (item.1.grants is defined or item.1.object_privs is defined)
   run_once: "{{ configure_cluster }}"
   become_user: "{{ oracle_user }}"
   loop_control:
-      label: "port: {{ listener_port_template }}, service: {{ db_service_name }}, role: {{ item.1.name | default('none') }}, grants: {{ item.1.grants | default('empty') }}, state: {{ item.1.state }}"
+      label: "port: {{ listener_port_template }}, service: {{ db_service_name }}, role: {{ item.1.name | default('none') }}, grants: {{ item.1.grants | default(omit) }}, state: {{ item.1.state }}"
   tags: users,grants
 
 - name: Manage role grants (pdb)
   oracle_grants:
           role={{ item.1.name }}
           state={{ item.1.state }}
-          grants={{ item.1.grants }}
+          grants={{ item.1.grants |default(omit) }}
+          object_privs={{ item.1.object_privs | default (omit) }}
           hostname={{ ansible_hostname }}
           port={{ listener_port_template }}
           service_name={{ item.0.pdb_name }}
@@ -41,18 +43,19 @@
       - flags:
         skip_missing: True
   environment: "{{oracle_env}}"
-  when: oracle_pdbs is defined and item.0 is defined and item.0.state|lower == 'present' and item.1.grants is defined
+  when: oracle_pdbs is defined and item.0 is defined and item.0.state|lower == 'present' and (item.1.grants is defined or item.1.object_privs is defined)
   run_once: "{{ configure_cluster }}"
   become_user: "{{ oracle_user }}"
   loop_control:
-      label: "port: {{ listener_port_template }}, service: {{ item.0.pdb_name }}, role: {{ item.1.name | default('none') }}, grants: {{ item.1.grants | default('empty') }}, state: {{ item.1.state }}"
+      label: "port: {{ listener_port_template }}, service: {{ item.0.pdb_name }}, role: {{ item.1.name | default('none') }}, grants: {{ item.1.grants | default(omit) }}, state: {{ item.1.state }}"
   tags: users,grants
 
 - name: Manage schema grants (cdb)
   oracle_grants:
           schema={{ item.1.schema }}
           state={{ item.1.state }}
-          grants={{ item.1.grants }}
+          grants={{ item.1.grants |default(omit) }}
+          object_privs={{ item.1.object_privs | default (omit) }}
           hostname={{ ansible_hostname }}
           port={{ listener_port_template }}
           service_name={{ db_service_name }}
@@ -65,18 +68,19 @@
       - flags:
         skip_missing: True
   environment: "{{oracle_env}}"
-  when: oracle_databases is defined and item.0.state|lower == 'present' and item.1.grants is defined
+  when: oracle_databases is defined and item.0.state|lower == 'present' and (item.1.grants is defined or item.1.object_privs is defined)
   run_once: "{{ configure_cluster }}"
   become_user: "{{ oracle_user }}"
   loop_control:
-      label: "port: {{ listener_port_template }}, service: {{ db_service_name }}, schema: {{ item.1.schema }}, grants: {{ item.1.grants | default('empty') }}, state: {{ item.1.state }}"
+      label: "port: {{ listener_port_template }}, service: {{ db_service_name }}, schema: {{ item.1.schema }}, grants: {{ item.1.grants | default(omit) }}, state: {{ item.1.state }}"
   tags: users,grants
 
 - name: Manage schema grants (pdb)
   oracle_grants:
           schema={{ item.1.schema }}
           state={{ item.1.state }}
-          grants={{ item.1.grants }}
+          grants={{ item.1.grants | default (omit) }}
+          object_privs={{ item.1.object_privs |default (omit)}}
           hostname={{ ansible_hostname }}
           port={{ listener_port_template }}
           service_name={{ item.0.pdb_name }}
@@ -89,9 +93,9 @@
       - flags:
         skip_missing: True
   environment: "{{oracle_env}}"
-  when: oracle_pdbs is defined and item.0 is defined and item.0.state|lower == 'present' and item.1.grants is defined
+  when: oracle_pdbs is defined and item.0 is defined and item.0.state|lower == 'present' and (item.1.grants is defined or item.1.object_privs is defined)
   run_once: "{{ configure_cluster }}"
   become_user: "{{ oracle_user }}"
   loop_control:
-      label: "port: {{ listener_port_template }}, service: {{ item.0.pdb_name }}, schema: {{ item.1.schema | default('none') }}, grants: {{ item.1.grants | default('empty') }}, state: {{ item.1.state }}"
+      label: "port: {{ listener_port_template }}, service: {{ item.0.pdb_name }}, schema: {{ item.1.schema | default('none') }}, grants: {{ item.1.grants | default(omit) }}, state: {{ item.1.state }}"
   tags: users,grants