I have had trouble getting parameters to work with Oracle connections. The workaround is to use a 2nd variable that contains your SQL, with an expression to include the 1st variable, and then in your Source use "SQL commmand from variable" for the Data access mode.