Fix grant macros SQL quoting: use join pattern instead of tojson (#36)

The Jinja tojson filter wraps values in double quotes which Snowflake
interprets as identifiers causing invalid identifier errors. Replaced with
the idiomatic join pattern to produce single-quoted SQL string literals.

Bumped version to 1.0.8.

.... Generated with [Cortex Code](https://docs.snowflake.com/en/user-guide/cortex-code/cortex-code)

Co-authored-by: Cortex Code <noreply@snowflake.com>

Author: jonhopper-dataengineers

CHANGELOG.md

@@ -1,6 +1,14 @@
 # Data Engineers Snowflake DataOps Utils Project Changelog
 This file contains the changelog for the Data Engineers Snowflake DataOps Utils project, detailing updates, fixes, and enhancements made to the project over time.
 
+## v1.0.8 - 2026-06-25 - Grant SQL Quoting Fix
+
+### Fixed
+- Fixed SQL compilation error in grant macros caused by `tojson` Jinja filter producing double-quoted strings (`"ROLE_NAME"`) which Snowflake interprets as identifiers instead of string literals. Replaced with `join("', '")` pattern to produce correct single-quoted SQL strings (`'ROLE_NAME'`). Affected macros: `grant_schema_read`, `grant_schema_object_privileges`, and `_grants_get_schema_object_privs`.
+
+### Changed
+- Bumped version from 1.0.7 to 1.0.8
+
 ## v1.0.7 - 2026-06-25 - Grant Performance Optimization
 
 ### Changed

README.md

@@ -2,7 +2,7 @@
 
 A macro-only [dbt](https://github.com/dbt-labs/dbt) package for Snowflake DataOps. Provides utilities for object lifecycle management, RBAC grant orchestration, dimensional modelling helpers, tagging, shares, and more.
 
-- **Version**: 1.0.7
+- **Version**: 1.0.8
 - **dbt**: `>=1.3.0, <3.0.0`
 - **Dependencies**: None (zero external package dependencies)
 - **dbt Fusion**: Compatible

dbt_project.yml

@@ -1,5 +1,5 @@
 name: 'dbt_dataengineers_utils'
-version: '1.0.7'
+version: '1.0.8'
 config-version: 2
 
 require-dbt-version: [">=1.9.4", "<3.0.0"]

macros/grants/_helpers.sql

@@ -132,10 +132,10 @@ These ideas intentionally deferred to keep current refactor incremental.
         from information_schema.object_privileges
         where object_schema = '{{ schema }}'
         {% if priv_filter | length > 0 %}
-          and privilege_type in ({{ priv_filter | map('tojson') | join(', ') }})
+          and privilege_type in ('{{ priv_filter | join("', '") }}')
         {% endif %}
         {% if grantees_upper | length > 0 %}
-          and grantee in ({{ grantees_upper | map('tojson') | join(', ') }})
+          and grantee in ('{{ grantees_upper | join("', '") }}')
         {% endif %}
         {% if object_type is not none %}
           and object_type = '{{ object_type | upper }}'

macros/grants/grant_schema_object_privileges.sql

@@ -80,8 +80,8 @@
         select distinct privilege_type, grantee
         from information_schema.object_privileges
         where object_schema = '{{ schema_name }}'
-          and privilege_type in ({{ permission_list | map('upper') | map('tojson') | join(', ') }})
-          and grantee not in ({{ role_list | map('tojson') | join(', ') }})
+          and privilege_type in ('{{ permission_list | map('upper') | join("', '") }}')
+          and grantee not in ('{{ role_list | join("', '") }}')
           and object_type = '{{ object_type | upper }}'
           and grantor is not null
     {% endset %}

macros/grants/grant_schema_read.sql

@@ -77,7 +77,7 @@
                     and table_privileges.table_catalog = tables.table_catalog
                 where tables.table_schema = '{{ schema }}'
                   and table_privileges.privilege_type in ('SELECT','REFERENCES','REBUILD')
-                  and table_privileges.grantee not in ({{ grant_roles | map('tojson') | join(', ') }})
+                  and table_privileges.grantee not in ('{{ grant_roles | join("', '") }}')
                   and granted_to = 'ROLE'
             {% endset %}
             {% set tbl_privs = run_query(revoke_query) %}