Apex users levels. 2 applications or only 1 divided in two?

Hi.
I got 10gXE and apex 2.1 (gotta upgrade it!)
Let me explain what i need to do but don't know how to.
I'm developing a unique app right now all apex users can acces, but later, i gotta divide that applicatioin in two. One group of pages are for managers (access to all pages) and another group of pages for common employees (access to only few pages)
If i develop two applications with different numbers (ex app 401 for managers and 402 for common employees) i should have 2 login pages right? one for each app.
Is there any possibility that, once i log in from a unique login page, that login page takes me to app 401 or app 402 depending if the username belongs to managers or common employees??
Or definetively, i should have two login pages, one for each app?.
I prefer not to do that, i prefer to give the users a unique login page from where they can access the app they are allowed to.
Thanks in advance...
Fernando.

Dear Chrissy...
I'll take a deep look into UsersGuide, but for know, I'll try to make myself clear so you can understand what i want.
The application users are divided in 2 groups, management (M) and common employees (CE). Depending whether an app user belongs to a certain group, he/she should be able to see ONLY the pages allowed for that type of user M or CE.
In the application, pages 1 to 10 are allowed to see and use for CE users, pages 20 to 24 are allowed to see and use for M users. CE are not allowed to see neither use pages of M users, and viceversa. For that purpose, i have 2 groups of Tabs, TAB1 owns pages 1 to 10 and TAB2 20 to 24. so, if you access page 3 for ex, you will only see on tabs, pages 1 to 10. If you access 22, you'll only see pages 20 to 24.
Just like you, i was also thinking on how to branch to different pages depending on authorization, so I modified the Login process at login page to
(remember: tipousmw is the type of user, mw_usuarios is the table where user data is stored -doce, name, email,. type of user - and tipousmw=1 if CE and 2 if M)
declare
q number;
begin
select tipousmw into q
from mw_usuarios
where usernamemw = lower(:P101_USERNAME);
IF q=2
THEN
wwv_flow_custom_auth_std.login(
P_UNAME => :P101_USERNAME,
P_PASSWORD => :P101_PASSWORD,
P_SESSION_ID => v('APP_SESSION'),
P_FLOW_PAGE => :APP_ID||':1'
ELSIF q=1
THEN
wwv_flow_custom_auth_std.login(
P_UNAME => :P101_USERNAME,
P_PASSWORD => :P101_PASSWORD,
P_SESSION_ID => v('APP_SESSION'),
P_FLOW_PAGE => :APP_ID||':20'
END IF;
end;
So it's supposed that if a username belong to CE, he/she will be redirected to page 1, otherwise, if it belongs to M, he/she will be redirected to page 20. And it worked at the beginning, but not later, i dont know if it got something to do with the cookie...
The previous procedure makes sense to me but.. don't know if you can try and tell me what happened.. hope somebody else have tried this so i can have a suggestion or an opinon on howcome it doesn't work properly....
Thanks in advance for your help-.....
Fernando...

Similar Messages

  • Apex User Level Security

    Hi,
    I have configured the APEX 3.2.1 with Oracle 11g. I have following requirement,
    When user login to the http://localhost:8080/apex page then user should be able to access only "SQL Worksop" and no other feature of APEX.
    Can anybody tell me how can I achieve this?
    Thanks and Regards,
    Ketan Dangi

    [READ HERE|http://download.oracle.com/docs/cd/E14373_01/nav/portal_booklist.htm] Hello
    In APEX there are different roles for different users which can be either: ADMIN, DEVELOPERS or USERS.
    Developers can view all of the development tools which includes: APPLICATION BUILDER, WORKSHOP and UTILITIES.
    Investigate more on this... READ HERE
    Or how about making your SQL Query tool... using APEX?
    In ORACLE you can parse SQL codes at runtime...this possible..
    Its hard and time consuming but will help you fullfill your goal..
    http://download.oracle.com/docs/cd/E14373_01/nav/portal_booklist.htm READ HERE for begining
    i know i am not useful and hope others can help you more..
    Regards,
    Noel Alex Makumuli
    Tanzania

  • Anonymous User + one application declared only = not press login button?!

    Hi,
    I am new here and try to configure SGD for an B2C access;
    it means after user has given the address in the web, SGD will
    start the declared application. (no click is necessary).
    It is possible to configure in this way?
    Thanks.
    Wenzel

    It would not be easy to configure the main web application this way. However, SGD ships a relatively simple JSP called "launcher.jsp". This could be copied and the copy modified to authenticate a user anonymously and then launch the application without any user interaction.

  • Ideas for Providing User Level Data Backup and Restore

    I'm looking for ideas for implementing a user level application data backup and restore in an Apex app.
    What would be great is to have a user be provided an export file and a way to import this file. A bit overkill but hopefully never needed.
    Another option that is perfectly doable is a report that simply provides a means to create an export of the data. Since I already have an interface I can use an export to interface an export.
    Any thoughts?
    Hopefully I'm missing something already there for an end user to use.

    jlincoln wrote:
    "Do you mean "export" and "import" colloquially, or in the specific sense of the exp/imp/datapump utilities?"': I mean as in imp/exp Oracle utilities. Generally speaking, it would be neat to be able to export and import via an Apex an application. In this hosted environment I don't have that access but would this be a bad idea if you don't care about the existing data in the schema in which the data resides?I can envisage a mechanism using <tt>exp/imp</tt>, but since it requires <tt>dbms_scheduler</tt> external jobs and access to the file system it's highly unlikely to be possible in a hosted environment. (Unless you're doing the hosting?)
    Backup: Necessary for piece of mind and flexibility. I am working on a VB/Access user who does this today to get to the point when they can be comfortable with the backups occurring regularly and by the hosting site's DBA group.
    Restore: Like I said. I am working on a VB/Access user who does this today to get to the point when they can be comfortable with the backups occurring regularly and by the hosting site's DBA group. This is a very small data set. A restore would simply remove existing data and replace it with the new data.My opinion is that time would be better spent working on the user rather than a redundant backup and restore feature. Involve them in a disaster recovery exercise with whoever is hosting the environment to prove that their data is safe. Normally the inclusion of data in regular, effective database backups is sold as a major feature of APEX solutions.
    "What about security/privacy when this data ends up in uncontrolled environments?": I don't understand the point of this question. The data should not end up in uncontrolled environments. Just like the data in the database or its backups.Again, having data in a central, shared location protected by multiple levels of application, database, and OS security is usually seen as a plus for APEX over VB/Access. Exporting the data in toto to a PC/laptop that can be stolen or lost, and where it can be copied to USB drives/phones/email loses this protection.
    User Level: Because the end user must have access to the backup and restore mechanisms of the application.
    Application Data: The application data. Less than 10MB. Very small. It can be exported in a flat file downloaded by the end user. This file can then be used to upload and import via an existing application interface. For example.
    "I'm struggling to parse this for meaning.": When I say I have an existing interface I am referring to a program residing in the Apex application that will take data from a flat table structure (i.e. interface table), validate the data, derive data, and load into the target table structure.Other than the report export capability linked to above, there's nothing built-in to APEX that comes close to your requirement. If the data is simple enough that it can be handled in such a report, and you have a process that can read and recreate this export, then you have your backup/restore capability. If the data can't be handled in a simple report, then you'll need a more complex PL/SQL process to generate the file.

  • Make all the forms at a user level or responsibility level to be read only

    Hi,
    Please suggest me to make all the forms at a user level or responsibility level to be read only. So that when a particular user logs in, he gets all the form in read only mode or at a particular responsibility all the forms are read only so that we can attach this responsibility to the user for the same purpose.
    Any ideas will be highly appreciated.

    check this blog,
    http://www.oracleappshub.com/11i/oracleapps-responsibility-vs-sap-functions/
    Re: How to change OM responsibility as read-only in oracle applications 11i
    read only responsibility-user

  • I want to open a domain.site2 file outside the default folder (User/Library/Application Support/iWeb) with iWeb11, but iWeb only opens the domain file in the default folder. If I delete the default domain file, iWeb wants to create a new site. Help please

    I want to open a domain.site2 file outside the default folder (User/Library/Application Support/iWeb) with iWeb11, but iWeb only opens the domain file in the default folder. If I delete the default domain file, iWeb wants to create a new site. Does anyone have the same problem or know how to fix it?

    In Lion the Finder folder is now invisible.  To make it permanetely visible enter the following in the Terminal applicaiton window: chflags nohidden ~/Library and hit the Enter button - 10.7: Un-hide the User Library folder.
    For opening your domain file in Lion for the first time or to switch between multiple domain files  Cyclosaurus has provided us with the following script that you can make into an Applescript application with Script Editor. Open Script Editor, copy and paste the script below into Script Editor's window and save as an applicaiton.
    Just launch the applicaiton, find and select the domain file you want to open and it will open with iWeb. It modifies the iWeb preference file each time it's launched so one can switch between domain files.
    do shell script "/usr/bin/defaults write com.apple.iWeb iWebDefaultsDocumentPath -boolean no"delay 1
    tell application "iWeb" to activate
    OT

  • Download application to only one user

    Is it possible to download applications that are specific to each user on the computer - i.e. they only appear in the application folder of the user that downloaded them.

    The folder Applications is a directory shared by all users not just you. The specific use of any one application is customised per user, and this information is contained in the User's Preferences files within their home folder. So for example with one Safari, different users can have their own homepage, particular websites, passwords etc. but it is still all from just one copy of Safari.
    If you wanted to limit the use of an application to only one user, you could change the user permissions for that application to be limited to one selected user only. This can be done in the Get Info dialogue box pertinent to the application. But this would be an unusual practice and I question why you would want to do this.

  • Need your suggestion / Input about choosing Apex for new application

    Guys,
    I came across oracle apex this week and started digging through the documentation and presentations. Read some forums as well. Now I believe, our application can be helpful by utilizing Apex but I would like to share high level application functionality which I am trying to implement through Apex
    Following are the functionality of the application:
    1) there will be 40 different entity in the application (create/edit/read/delete)
    2) Each entity and CRUD processing will be roles based
    3) On various events, send email and generate XML files for interfacing with external system
    4) Scheduling report generation and normal report generation
    5) Detail audit trail of the application (doesn't depend of Ajax, but still want to point out)
    6) Various search capabilities for each entity
    7) On various event and user selection: generate PDF file which user can download / print.
    8) Many client side and server side validations.
    Based on my reading, I believe this can be easily achieved with certainly some learning curve in AJAX. (which I have to do as I lost my entire project team due to budget issues.). I have a web devleopment background using Java, JSP and Servlet for 5 years. (Nothing in last 3 years though)
    Please let me know your thoughts based on my current situation and functionality.
    Also, Do i need to buy anything to get started with apex and implementing apex full blown application (they say it's free, but just want to understand your perspective as well).
    Thank you for reading the post and your support.
    -Raj

    Guys,
    I came across oracle apex this week and started digging through the documentation and presentations. Read some forums as well. Now I believe, our application can be helpful by utilizing Apex but I would like to share high level application functionality which I am trying to implement through Apex
    Following are the functionality of the application:
    1) there will be 40 different entity in the application (create/edit/read/delete)
    2) Each entity and CRUD processing will be roles based
    3) On various events, send email and generate XML files for interfacing with external system
    4) Scheduling report generation and normal report generation
    5) Detail audit trail of the application (doesn't depend of Ajax, but still want to point out)
    6) Various search capabilities for each entity
    7) On various event and user selection: generate PDF file which user can download / print.
    8) Many client side and server side validations.
    Based on my reading, I believe this can be easily achieved with certainly some learning curve in AJAX. (which I have to do as I lost my entire project team due to budget issues.). I have a web devleopment background using Java, JSP and Servlet for 5 years. (Nothing in last 3 years though)
    Please let me know your thoughts based on my current situation and functionality.
    Also, Do i need to buy anything to get started with apex and implementing apex full blown application (they say it's free, but just want to understand your perspective as well).
    Thank you for reading the post and your support.
    -Raj

  • URGENT HELP: When some users submit, application carries empty fields from html components to plsql code

    Hi APEX users and developer, especially forum's active users, please get me rid of this problem because it is really very bad situation.
    I have a real trouble with application. It behaves unusual. Application is used by 60 users but only 3 of them have these problem and they can not use the application anymore.
    Application is
    http://apex.oracle.com/pls/apex/f?p=70547
    After fields are filled and some rows checked from tabular form in page, user submits the page. Process called newReyestr calls plsql procedure from package with inputs from page. But only same 3 users get empty fields in plsql code. I see it just after when the first line stepped in procedure.
    So, "what is the problem?"

    Hi NoGot,
    you know, I have not written big quote. The code was big. But it has no any meaning. Because problem is in first line. No need to understand it.
    There is no any difference between those users. They also tried it from different browser and even computers.
    BTW: I am not russian.

  • Restricting Authorizations to Variants at User level

    Hi SAPians,
    Can you help me to know how can I restrict variants to be displayed for particular users.?
    Example: I am creating 5 variants in EMMACL transaction and give authorizations for the users only to particular Variants as below:
    1. Variant1 --> Can be access by only users ERP-EHK, ERP-SAP & ERP-EJS
    2. Variant2 --> Can be access by only users ERP-EAS & ERP-HJG.
    3. Variant3 --> Can be access by only user ERP-EMM
    4. Variant4 --> Can be access by only users ERP-EHK & ERP-UJY
    5. Variant5 --> Can be access by only user ERP-EAS
    Let me know how I can achieve the above requirement?

    Hi,
    i have assigned it at user level then why iam i
    getting the currency code of site level ?Did you user to logout and login again after setting the profile option at the user level?
    What if you set this profile option at the site/application/responsibility level, can you reproduce the issue then?
    Thanks,
    Hussein

  • Controlling Task expiry at User Level programatically

    Hi to all BPEL Guru's. Need some expert advice.
    I am using Oracle SOA Suite 10.1.3.4 on weblogic server 9.2
    The requirement given to me says that,
    - Number of approvers for a task may vary on case to case bases, and needs to be pushed in the workflow as a set of parameters.
    - Every user may have a different SLA to act on a given task.
    To satisfy the first requirement my first approach was to use Sequential Approver Participant Type and push a comma seperated approver list to the workflow. But the issue with this approach is, associating a different expiry date to every user would be a big deal. And even if I find a way to get the associated expiry date, I would not be able to set it on user level, as the 'By Expression' is supported only at Global Expiration and Escalation Policy level and not at the Participant type level. Does anything click in your mind as a workaround to this? Appreciate your help. One workaround I can think about is to get handle of 'OnUpdated' callback and change the Global Expiration and Escalation policy everyime the task is updated.
    The second approach was to have a defined set of 'Single Approver' participant types (i.e. Multiple Single Approvers)under 'Assignment and Routing Policy'. Here the dynamicity of number of approvers is lost. So I will have to design multiple workflows with a selected set of approvers. The workflow submitter can select the appropriate workflow and submit it. In this approach I can atleast associate an expiry date with a user in the incoming payload and assign to the single approver.
    Not sure how to get out of it.
    Any help is highly appreciated.
    Many Thanks,
    Vikas

    Check Note: 364503.1 - How to Set a System Profile Value Without Logging in to the Applications
    https://metalink.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=364503.1

  • How to migrate Apex users with existing passwords.

    Hi Guys,
    Our apex env finally getting a upgrade from 3.1.1 to 4.1.1 (I know, it's been overdue for years)
    Some of our apps use 'Application Express' authentication, and have few hundreds users in Apex (and users belong to diff user groups).
    The issue is, the 4.1.1 env is set up on a brand new server and DB, we want to migrate these users with their existing passwords from the 3.1.1 env.
    I tried exporting the workspace, and the users are exported as below,
         begin
         wwv_flow_fnd_user_api.create_fnd_user (
         p_user_id => '10592934818556549584',
         p_user_name => 'TEST',
         p_first_name => 'a',
         p_last_name => 'b',
         p_description => '',
         p_email_address=> '[email protected]',
         p_web_password => 'E92903DEAD135E6E86BD6B64544D2BD9',
         p_web_password_format => 'HEX_ENCODED_DIGEST_V2',
         p_group_ids => '10592435401495787816:',
         p_developer_privs=> '',
         p_default_schema=> 'TEST',
         p_account_locked=> 'N',
         p_account_expiry=> to_date('201212040000','YYYYMMDDHH24MI'),
         p_failed_access_attempts=> 0,
         p_change_password_on_first_use=> 'Y',
         p_first_password_use_occurred=> 'N',
         p_allow_access_to_schemas => '');
         end;
    when I run this in 4.1.1 I had to modify it to the new format as below,
    also changed the p_group_ids to new user group but kept the password the same
         begin
         wwv_flow_fnd_user_api.create_fnd_user (
         p_user_id => '',
         p_user_name => 'TEST',
         p_first_name => 'a',
         p_last_name => 'b',
         p_description => '',
         p_email_address=> '[email protected]',
         p_web_password => 'E92903DEAD135E6E86BD6B64544D2BD9',
         p_web_password_format => 'HEX_ENCODED_DIGEST_V2',
         p_group_ids => '1399416797653068:',
         p_developer_privs=> '',
         p_default_schema=> 'TEST',
         p_account_locked=> 'N',
         p_account_expiry=> to_date('201209041006','YYYYMMDDHH24MI'),
         p_failed_access_attempts=> 0,
         p_change_password_on_first_use=> 'Y',
         p_first_password_use_occurred=> 'N',
    p_allow_app_building_yn=> 'N',
    p_allow_sql_workshop_yn=> 'N',
    p_allow_websheet_dev_yn=> 'N',
    p_allow_team_development_yn=> 'N',     
    p_allow_access_to_schemas => '');
         end;
    the result was that the user is created fine, but the password is not valid.
    Anyone knows how to export apex users with existing password to a new server?
    Thanks.
    Edited by: Danny on 3/12/2012 20:51

    Hi,
    Not sure why you say
    when I run this in 4.1.1 I had to modify it to the new format as below, If you just run the workspace export sql it should create the Workspace, Groups and Users
    The signature of the procedure is below. See the highlighted lines.
    procedure create_fnd_user (-- Description:
    -- This procedure allows for programatic and bulk creation of users.
    -- Example:
    -- From sqlplus logged in as the privileged flows user, first
    -- ensure that the security group id is set properly, then create
    -- your users.
    <b> -- begin wwv_flow_security.g_security_group_id := 20; end;</b>
    -- begin
    -- for i in 1..10 loop
    -- wwv_flow_fnd_user_api.create_fnd_user(
    -- p_user_name => 'USER_'||i,
    -- p_email_address => 'user_'||i||'@mycompany.com',
    -- p_web_password => 'user_'||i) ;
    -- end loop;
    -- commit;
    -- end;
    -- Arguments:
    -- p_user_id numeric primary key of user
    -- p_user_name the username the user uses to login
    -- p_first_name informational only
    -- p_last_name informational only
    <b> -- p_web_password the unencrypted password for the new user</b>
    -- p_group_ids A colon delimited list of group IDs from the table wwv_flow_fnd_user_groups
    -- p_developer_privs A colon delmited list of developer privs, privs include:
    -- ADMIN:BROWSE:CREATE:DATA_LOADER:DB_MONITOR:EDIT:HELP:MONITOR:SQL:USER_MANAGER
    -- p_default_schema A valid oracle schema that is the default schema for use in browsing and
    -- creating flows
    -- p_allow_access_to_schemas A colon delimited list of oracle schemas that the user is allowed to
    -- parse as. If null the user can parse as any schema available to the company.
    -- This does not provide privilege it only resticts privilege, so listing a schema
    -- does not provide the privilege to parse as a schema, it only restricts that user
    -- to that list of schemas.
    -- p_attributes_XX These attributes allow you to store arbitary information about a given user.
    -- They are for use by flow developers who want to extend user information.
    <b> -- p_web_password_format Identifies the format of the web password.
    -- The range of values is CLEAR_TEXT, HEX_ENCODED_DIGEST, DIGEST </b>
    -- p_person_type "E" marks the user as external
    -->
    Note there is no HEX_ENCODED_DIGEST, DIGEST_V2 listed. It may work, but not obvious from the signature.
    Cheers,

  • User Accounts - Applications

    Hi there,
    Is there a way of hiding applications bewteen different users, ie yahoo messanger, my son is barred form using it for two weeks howver I don't want to delete it off the system.
    Many thanks in advance for your help.

    Bogus274 wrote:
    yahoo messanger, my son is barred form using it for two weeks howver I don't want to delete it off the system.
    Two options:
    (1) If you don't already have a folder named Applications in your Home folder, create it, then move the application you want to deny your son to it. In Mac OS X, applications installed in </Applications> are available to all users, while applications installed in <~/Applications> are available only to the respective user.
    (2) Compress the application in question as an encrypted (password-protected) archive, then delete the app. When you want to restore it, expand the password-protected archive. (Make sure you don't forget the password!) Here's how
    <http://osxdaily.com/2012/01/07/set-zip-password-mac-os-x/>
    However, either option is easily circumvented -- what's to prevent your son from downloading his own copy of Yahoo Messenger and install it in his own <~/Applications>? Or running it from a USB thumb drive?
    You need to look into a different solution -- eg, parental controls, or controlling traffic type from the router. (Or even better, forget the belief that social issues can be solved by technical solutions, and deal with your son on a parental, rather than technological, level.)

  • How do I move an App Store app to a user's application folder?

    I have set up my mom with an older Macbook Pro of mine to save her from the evils of the PC. I set up two users, one for her and one for me; hers is uber simple (big icons, only the essentials in the doc) mine is crazy complicated. We share apps, of course, which was fine until I realized she is going to want to download Mah Jongg game apps and the like from the App Store, and I would LOVE it if I didn't have to have all that cluttering up the root Applications folder.
    I already tried to move one app from root to her user's Applications folder and all that moved was an alias, the app stayed at root. So how does one move these things? Is there a way via the finder? Can I use terminal (and if so could someone spell out the command for me?)
    Thanks in advance.

    You might want to rethink moving the apps.
    First the App Store knows what's installed by looking in the Applications folder. If the app is not there but is listed as purchased it will be prompting you to download it constantly.
    Second Lion has really locked down the permissions on the Applications folder, even Admins (as you're discovered) have to jump through hoops to change stuff around. You'll need to change permissions on the folder at least to get the apps out. It will be a pain in the long run.
    Again weigh the inconvenience of having an extra few apps in the Applications folder against what I described above.
    regards

  • How to create a profile value at user level programatically

    Dear all,
    I want to create a profile value at user level programatically, I refer to the developer guide and try to use fnd_profile.put() to create a new value.
    But I find out the value is just created in session level, not be inserted into base table.
    So is there anyone know how to realize this function in PL/SQL?
    Any idea is appreciated.
    Best Regards,
    Kenny

    Check Note: 364503.1 - How to Set a System Profile Value Without Logging in to the Applications
    https://metalink.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=364503.1

Maybe you are looking for