Application express security based on table values

If for example 100 customers use an application build with application express, how can I restrict rows on there forms and reports.
Each customer is allowed to see only their own articles (using the same table; condition on custno)

Use Oracle VPD (Virtual Private Database) simply put. I currently use it in our applications.
Do a search on OTN, Oracle's main website and also google between all three you will see how to implement it. It isn't bad, if you need further help let me know.
http://www.oracle.com/technology/deploy/security/database-security/virtual-private-database/index.html
Justin

Similar Messages

Trying to get the input parameter of a web service fxn based on table value

Hello--
I am new to ADF and Jdev 11g (I am a forms developer). I had created a web service from a pl/sql stored db package. I can successfully execute a function with an input parameter from ADF Faces.
Instead of the input parameter being enterable by the user, I would like it to be based on a selected ADF table column value. How would I correlate the selected row column value as the function input parameter?
I played with an ADF output text based on the ADF table column with the PartialTriggers value set to the ADF table...which updates the output text based on the column selected. Do I use some sort of partial trigger on the input parameter?
From a forms point of view, I am looking for the "Copy Value from Item" property :)

Hi,
Not sure if this would help you.
But if your table is bound to a ViewObject, it will be easier to get the current selection.
Supose your table is bound to iterator1.
In your backBean code:
DCBindingContainer dcBindings = (DCBindingContainer)getBindings();
DCIteratorBinding iterator =dcBindings.findIteratorBinding("iterator1");
Row row = iterator.getCurrentRow();
Object selectedValue = row.getAttarbute(<value of the column you are looking for>);
public BindingContainer getBindings() throws Exception {
try {
if (this.bindings == null) {
FacesContext fc = FacesContext.getCurrentInstance();
this.bindings =
(BindingContainer)fc.getApplication().evaluateExpressionGet(fc,
"#{bindings}",
BindingContainer.class);
return this.bindings;
} catch (Exception ex) {
displayMessage("Error occurred. Please contact your IT Adminstrator.");
return this.bindings;
Let me know if this helps.
-Makrand

Dynamic tabs based on table values

Hi all,
How can you display tabs dynamically based on user authorization and values in a table that contains the page id's and tab id's for example?

based on user authorizationThat is already standard Apex functionality.
and values in a tableYou can use jQuery to hide a tab. So, you create a tab in Apex, but hide it when necessary when running the page. Something like:
if (<some condition>) {
$("#tab_id").hide();
};Put this in the "Execute when Page Loads" in the JavaScript section on the Page definition.

Process chain flow - based on table values

Hi,
I want to control the flow of Process chain run through the values that exist in a field ZCONTROL of Z table.
I have created an ABAP Program where I access the Ztable to get the ZCONTROL values and have added the program in the ABAP process type.
Below the ABAP process type, I have added the Process type "Decision between Multiple Alternatives" and created a formula using Predecessor_Parameter function to get the ZCONTROL values.
The format is PREDECESSOR_PARAMETER( <I_FIELDNAME>, <I_LOW_OR_HIGH>, <I_NUM
How should I get the I_FIELDNAME value here?
Please help.
Thanks.

Hi Eric / Steph,
Thanks for your reponses.
Eric,
My table has the infopackages name and ZCONTROL field, which contains an indicator "X" or SPACE based the scheduling requirements. If "X", the Infopackage is scheduled else, it is not.
In the formula, how will I import the infopackage name. The custom function can be created with export parameters as ZCONTROL values.
But when I use the custom funtion, I will need to use the fields on the left hand side and it should have the infopackage name ideally.
If you get any idea, please let me know.
Steph,
I will try your suggestion.
Can one ABAP program added as an ABAP Process type in the Process chain, trigger multiple events for different process chains?
Also, if the infopackages are scheduled, one below the other, if one is not scheduled, will it move to the next one? Will it go as an error(red) or green? Should 2 load infopackages process types connected as success or Always?
Please clarify.
Thanks.
Also,

Inserting values in a table from a view report in Application Express

Hello.
I have several tables with the sql bellow:
Employee
CREATE TABLE "Employee"
(     "Employee_ID" NUMBER,
"Name" VARCHAR2(12) CONSTRAINT "NAME_EMPLOYEE_NN" NOT NULL ENABLE,
"Surname" VARCHAR2(10) CONSTRAINT "SURNAME_EMPLOYEE_NN" NOT NULL ENABLE,
"Address" VARCHAR2(50) CONSTRAINT "ADDRESS_EMPLOYEE_NN" NOT NULL ENABLE,
"Telephone" VARCHAR2(10),
"Personal_ID_Number" VARCHAR2(13),
"Date_of_Employment" VARCHAR2(10) CONSTRAINT "DATA_NN" NOT NULL ENABLE,
"Salary" NUMBER(6,0),
CONSTRAINT "Employee_ID_con" PRIMARY KEY ("Employee_ID") ENABLE,
CONSTRAINT "Employee_CON" UNIQUE ("Personal_ID_Number", "Telephone") ENABLE
Patient
CREATE TABLE "PATIENT"
(     "Patient_ID" NUMBER,
     "Name_Patient" VARCHAR2(13) CONSTRAINT "NAME_PAT_NN" NOT NULL ENABLE,
     "Surname_Patient" VARCHAR2(10) CONSTRAINT "SURNAME_PAT_NN" NOT NULL ENABLE,
     "ADSRESS_PATIENT" VARCHAR2(50),
     "TELEPHONE_PATIENT" VARCHAR2(10) CONSTRAINT "TEL_PAT_NN" NOT NULL ENABLE,
     "EMPLOYEE_ID" NUMBER CONSTRAINT "DENTIST_PAT_NN" NOT NULL DISABLE,
     CONSTRAINT "PK_PATIENT" PRIMARY KEY ("PATIENT_ID") ENABLE,
     CONSTRAINT "PACIENT_CON" UNIQUE ("TELEFON_PACIENT") ENABLE
ALTER TABLE "PATIENT" ADD CONSTRAINT "PATIENT_CON3" FOREIGN KEY ("Employee_ID")
     REFERENCES "Dentist" ("Employee_ID") ON DELETE SET NULL ENABLE
Appointment
CREATE TABLE "Appointment"
(     "Appointment_ID" NUMBER,
     "Employee_ID" NUMBER CONSTRAINT "NN_Dentist_Appointment" NOT NULL ENABLE,
     "Patient_ID" NUMBER CONSTRAINT "NN_PATIENT_Appointment" NOT NULL ENABLE,
     "Who_Made" NUMBER,
     "Who_Changed" NUMBER,
     "Who_Canceled" NUMBER,
     "Content" VARCHAR2(1000),
     "DATE" DATE,
     CONSTRAINT "PK_Appointment" PRIMARY KEY ("Appointment_ID") ENABLE
ALTER TABLE "Appointment" ADD CONSTRAINT "Appointment_CON" FOREIGN KEY ("Patient_ID")
     REFERENCES "PATIENT" ("Patient_ID") ENABLE
ALTER TABLE "Appointment" ADD FOREIGN KEY ("Employee_ID")
     REFERENCES "Dentist" ("Employee_ID") ENABLE
ALTER TABLE "Appointment" ADD FOREIGN KEY ("Who_Made")
     REFERENCES "Employee" ("Employee_ID") ENABLE
ALTER TABLE "Appointment" ADD FOREIGN KEY ("Who_Changed")
     REFERENCES "Employee" ("Employee_ID") ENABLE
ALTER TABLE "Appointment" ADD FOREIGN KEY ("Who_Canceled")
     REFERENCES "Employee" ("Employee_ID") ENABLE
Dentist
CREATE TABLE "Dentist"
(     "Employee_ID" NUMBER,
"Qualifications" VARCHAR2(50),
CONSTRAINT "RB_VRAB_STOMATOLOG_PK" PRIMARY KEY ("Employee_ID") ENABLE
ALTER TABLE "Employee_ID" ADD CONSTRAINT "Dentist_CON" FOREIGN KEY ("Employee_ID")
REFERENCES "Employee" ("Employee_ID") ON DELETE CASCADE ENABLE
I'm trying to make an application in Oracle Application Express and I've tried making an SQL report using the following SQL query:
CREATE OR REPLACE FORCE VIEW "Appointment_REPORT" ("DOCTOR", "PATIENT", "Content", "Date") AS
select concat(concat(v.name,' '),v.surname) as doctor, concat(concat(pa.name_patient,' '),pa.surname_patient) as pactent, p.content, p.date
from Appointment p, Amployee v, Patient pa
where
v.employee_id=p.employee_id
and p.patient_id=pa.patient_id
The SQL works fine and gives me lovely results in my report. However, I don't know how to link the SQL to my actual Appointment table. Deleting, updating or creating new appointments through this view is impossible because I get the following error Unexpected error, unable to find item name at application or page level.
I understand how to make a form on the Appointment table but given how that table contains lots of primary keys (numbers) it's not preferable for the user to have to deal with that.
Can I have some help with linking the two and making it functional?
Thanks in advance.

982909 wrote:
Hello.
I have several tables with the sql bellow:You are digging yourself a DEEP hole by using double quote marks & Mixed Case table & column names!
>
CREATE TABLE "Appointment"
(     "Appointment_ID" NUMBER,
     "Employee_ID" NUMBER CONSTRAINT "NN_Dentist_Appointment" NOT NULL ENABLE,
     "Patient_ID" NUMBER CONSTRAINT "NN_PATIENT_Appointment" NOT NULL ENABLE,
     "Who_Made" NUMBER,
     "Who_Changed" NUMBER,
     "Who_Canceled" NUMBER,
     "Content" VARCHAR2(1000),
     "DATE" DATE,
AVOID using Reserved Words like "DATE" as column or table names!
>
I'm trying to make an application in Oracle Application Express and I've tried making an SQL report using the following SQL query:
CREATE OR REPLACE FORCE VIEW "Appointment_REPORT" ("DOCTOR", "PATIENT", "Content", "Date") AS
select concat(concat(v.name,' '),v.surname) as doctor, concat(concat(pa.name_patient,' '),pa.surname_patient) as pactent, p.content, p.date
from Appointment p, Amployee v, Patient pa
where
v.employee_id=p.employee_id
and p.patient_id=pa.patient_id
The SQL works fine and gives me lovely results in my report. However, I don't know how to link the SQL to my actual Appointment table. Deleting, updating or creating new appointments through this view is impossible because I get the following error Unexpected error, unable to find item name at application or page level.
I understand how to make a form on the Appointment table but given how that table contains lots of primary keys (numbers) it's not preferable for the user to have to deal with that.
Any table can have only ONE Primary Key.
Can I have some help with linking the two and to which "two" do you refer?
making it functional?Since you have told us what functionality is desired or expected,
I don't know what might be a solution.

ADF Table cell color based on the value in that field

Dear All,
I want to create a table for our new application which contains a table used to represent the data in a chart format or matrix format,
and each cell of the table should be filled with a colour out of three colors, based on the value belongs to which range eg:(1-8 ->green, 9-20 - yellow etc),
I dont know how to implement this. Please help...
Ranjith

Check this out.
How to highlight ADF table row based on column value?
-Arun

How to retrive new logical column based on flag values in table.

Hi,
i have two tables in rpd
1.file table contains the coulmns------->date,file_count,record_count,cldm_stg,cmsa_stg,archive_stg
2.rejection table columns---------> are same as above
both have same common columns.my requirement is publish a dashboard like:
date | land_files count |alnd_recordscount| target_files count|target_records count|Rejection filecount|rejection record count
These report ineed retrive from those two tables.based on flag values.taget countcomes when all stg values set to ='y'
i.e(cldm_stg='y' and cmsa_stg='y'and archive_stg='y') if not then it will be in rejection file.
Please give solution how to achive my output.
nQSError: 14026] Unable to navigate requested expression: Target_record:[DAggr(FILE_CONTROL.Target_record by [ FILE_CONTROL.FILE_NAME, REJECTED_FILES.FILE_NAME, REJECTED_FILES.NO_OF_ROWS, File_landing.NO_OF_ROWS, File_landing.FILE_LOAD_DATE] SB FILE_CONTROL)]. Please fix the metadata consistency warnings. (HY000)
Edited by: user8767586 on Jan 12, 2010 4:29 AM

Tanks for ypur reply .only two tables are there named as above.i taken file_control as a fact table.
and i create one new tablecalled target in bmm layer taking logical source as file_control(fact table). and iset the where clause for the new table.and i create a new measure called target_file and target_records.in where clause my query is like
dwbidb."".AUDIT_PROD.FILE_CONTROL.ARCHIVE_STATUS = 'Y' AND dwbidb."".AUDIT_PROD.FILE_CONTROL.CMSA_STATUS = 'Y' AND dwbidb."".AUDIT_PROD.FILE_CONTROL.LND_STATUS = 'Y' AND dwbidb."".AUDIT_PROD.FILE_CONTROL.SCRIPT_STATUS = 'Y' AND dwbidb."".AUDIT_PROD.FILE_CONTROL.STG_STATUS = 'Y'
please tell me if this is right way to achive mt report. and tell me difference between fragmentation and whereclause.for my requrement i ahve to follow which method either fragmentation or whereclause.and in rpd there are no errors and warnings.but in answers i get a follwing error
State: HY000. Code: 10058. [NQODBC] [SQL_STATE: HY000] [nQSError: 10058] A general error has occurred. [nQSError: 14026] Unable to navigate requested expression: TARGET_FILECOUNT:[DAggr(TARGET.TARGET_FILECOUNT by [ TARGET.FILE_NAME] SB TARGET)]. Please fix the metadata consistency warnings. (HY000)
SQL Issued: SELECT TARGET.FILE_LOAD_DATE saw_0, TARGET.TARGET_FILECOUNT saw_1, TARGET.TARGET_FILECOUNT saw_2 FROM AUDIT_PROD ORDER BY saw_0.
Please tell me to achive my report.
Regards
Edited by: user8767586 on Jan 12, 2010 5:21 AM
Edited by: user8767586 on Jan 12, 2010 5:21 AM
Edited by: user8767586 on Jan 12, 2010 5:24 AM

Database security with PUBLIC EXECUTE privileges for Application Express

I recently tried installing APEX into an existing database containing a data warehouse. Security on this database is quite controlled and PUBLIC EXECUTE to SYS owned objects had been removed. Ie there was no PUBLIC EXECUTE on:
DBMS_LOB
UTL_HTTP
UTL_FILE
UTL_SMTP
UTL_RAW.
When I tried to install APEX, I got all kinds of errors and logged a TAR. The analyst told me to grant execute to public to the above SYS owned objects. This contradicts the "Policies" in 10G Grid control and the Metalink Notes 131752.1 &
Note:247093.1.
Can these execute privileges be changed to another user in the htmlDB
application such as FLOWS_FILES? Or HTMLDB_PUBLIC_USER? What is the security reccomendations for Oracle Application Express? Calling any product managers out there....

Developers/users have started clicking around and are now getting errors. There is a function called CUSTOM_AUTH and one called CUSTOM_HASH which do not compile. They have complain about not seeing UTL_RAW so had been relying on PUBLIC synonyms. here's the 1 function:
create or replace function custom_hash (p_username in varchar2, p_password in varchar2)
                         return varchar2
                         is
                         l_password varchar2(4000);
                         l_salt varchar2(4000) := '2ZVKZMILYMGVFRFXOZIVZ72RJNJY8V';
                         begin
                         -- This function should be wrapped, as the hash algorhythm is exposed here.
                         -- You can change the value of l_salt or the method of which to call the
                         -- DBMS_OBFUSCATOIN toolkit, but you much reset all of your passwords
                         -- if you choose to do this.
                         l_password := utl_raw.cast_to_raw(dbms_obfuscation_toolkit.md5
                         (input_string => p_password || substr(l_salt,10,13) || p_username ||
                         substr(l_salt, 4,10)));
                         return l_password;
                         end;

Error During Creation of Table Value Request /Simple Value Request Express

Hi,
I am on SAP CRM ABAP 7.0 with enhancement pack 2.0.
The requirement is to create a decision table which would have value(search helps) requests for some of the condition columns in it. For example, Value Request for condition column Y would come according to condition column X . As per my understanding,this could only be achieved by maintaining foreign key relationship. So I tried to create a Table Value Request which I could assign in the domain values in the data object of the corresponding condition column.
But,when I am trying to create a Table Value Request or Simple Value Request in BRF+ application, it is throwing an error message "Table FDT_EXPR_1950S is not part of the Customizing object FDT0001 T".
Could you please help me out !!

Hi Carsten,
Thanks for your quick response.
Just wondering whether or not I can achieve the requirement without Table Value Request. Do you have any idea on this?

Update a table based on Min value of a column of a Another Table.Pls Help.

Dear All,
Wishes,
Actually I need update statement some thing like below scenario...
Data in table is like below:
I wrote a query to fetch data like below ( actually scenario is each control number can have single or multiple PO under it ) (i used rank by to find parent to tree like show of data)
Table: T20
Control_no        P_no Col3
19950021     726473     00
19950036      731016     00
19950072     731990     00
                 731990 01
19950353     734732     00
                 734732 01
19950406     736189     00
             736588     01
             736588     02
             736588     03
Table : T30
Control_no      P_no              col3
19950021     726473
19950036     731016
19950072     731990
             731990
19950353     734732
              734732
19950406     736189
              736588
              736588
               736588
Now requirement is I need to update Table T30's col3 (which do have values in T20 but not this table) in such a way that , It should take MIN (COL3) from T20 and then update that value to related Col3)
Better I can explain through below new data format in T30 after update:
After update it should like:
Table : T30
Control_no       P_no    col3 (this is updated column)
19950021     726473   00 -- as this is min value for Pno 726473 belongs to Control NO 199950021 in Table T20 above
19950036     731016   00 -- as this is min value for Pno 726473 belongs to Control NO 199950021 in Table T20 above
19950072     731990   00 -- see here..both Pno should updated as '00' as MIN value col3 in Table T20 related to this
             731990      00     record is '00' (out of 00,01 it should select 00 and update that value here)
19950353     734732      00 -- same again both Pno should updated as '00' as MIN value col3 in TableT20 related to this
             734732      00     record is '00' (out of 00,01 it should select 00 and update that value here)
19950406     736189      00 -- As there is single col3 value in T20, 00 should be updated here.
             736588      01 -- Here it should update col3 as '01' since for this pno(736588)
             736588      01 -- Here too it should update col3 as 01 per requirement ,minimum value of this pno in T20
             736588      01 --     same here too.. Sorry if my post formatting is not good...
Hope i am clear in my requirement..(update T30 col3 based on min value of col3 of related records)
Please suggest some update sql for this...(ideas would be great)
I am using oracle 10 g version soon will be migrated to 11g..
Regards
Prasanth
Edited by: Onenessboy on Oct 20, 2010 12:13 PM
Edited by: Onenessboy on Oct 20, 2010 12:15 PM

Onenessboy wrote:
I am really sorry, my post so nonsense in look..
I used to use for actuall code..
the out put i tryped, i used [pre] , [/pre] but still does not look good..
hmm..thanks for your suggestion hoek..
so any ideas about my requirement...I would suggest spending a bit more time trying hoek's suggestion regarding {noformat}{noformat} tags instead of repeatedly asking for more help.
Because to understand your requirement, people are going to have to read it first.

In application express under object browser i cant view the list of tables

Hi,
In the application Express workspace when i click on Object Browser, we have a list of existing tables which displays. But cant view the table list now. could you please help. I can retrieve the data from the table in the region. I dont know how it got hidden.
Regards,

Please tell us your first name and put it into your handle and profile to help us.
...we have a list of existing tables which displays.
But cant view the table list now.
cant -> can't
Aren't those contradictory statements?
What is your version of Application Express?
Scott

When I open Firefox the following alert appears: "Could not initialize the application's security component. The most likely cause is problems with files in your application's profile directory." There is a solution in the forum but only for Windows based

When I open the application the following alert appears: "Could not initialize the application's security component. The most likely cause is problems with files in your application's profile directory." There is a solution on the support site but only for Windows-based Firefox, and I'm a Mac user. I have plenty of room on my hard disk.
== This happened ==
Every time Firefox opened
== Two days ago, for no apparent reason.

In Mac OS X v10.7, the $HOME/Library folder is a hidden folder.
Open Finder and use one of these:
* Go > Go To Folder (Shift-Command-G) and in the dialog type: ~/Library
* Open the "Go" menu and hold down the Option key to make the Library appear
You can also use this command in a Terminal window to remove the hidden flag.
* Mac HD > Applications > Utilities > Terminal
* chflags nohidden ~/Library

Needs Query to get the cycle time automatically based on the value provided in the UDF on OWOR table

Dear all,
Need a query to get the Cycle time in hr based on the value provide in the udf on OWOR table.
Details of UDF:-
1.Start date =10/07/14 (Field Name U_EA_REST)
2.Start time =10:00        (Field Name U_EA_REASTARTTIME)
3.End date =11/07/14    (Field Name U_EA_REET)
4.End Time=14:00          (Field Name U_EA_REAENDTIME
Cycle Time=_______      (Field Name U_EA_REACYCLETIME)
Regards,
BanugopanRajendran

Dear all,
Need a query to get the Cycle time in hr based on the value provide in the udf on OWOR table.
Details of UDF:-
1.Start date =10/07/14 (Field Name U_EA_REST)   - Date Type
2.Start time =10:00        (Field Name U_EA_REASTARTTIME) - Hour Type
3.End date =11/07/14    (Field Name U_EA_REET) - Date Type
4.End Time=14:00          (Field Name U_EA_REAENDTIME - Hour Type
Cycle Time=_______      (Field Name U_EA_REACYCLETIME) - Hour Type
Regards,
BanugopanRajendran

How to use expressions to check if a value is containted in another table.

Hello,
I have a flat Material table ("Material_table" with a Mat_ID) and a main table that stores MAT_ID and (e.g) Manufacturer. I DO NOT want to use a lookup table (since I don`t want to use the drop-down boxes), but I want to create a (simple) validation that checks, if the MAT_ID that is entered into field MAT_ID in the main table is contained in the Material table.
This serves as a simple "foreign key" check, checking if a value into a table can be found in another table.
Can anyone post the code that has to be written into the validations-Editor.
The expression in the main table could look something like:
Logically:
Check IF (MAT_ID IS_CONTAINED_IN(Material_table[MAT_ID]) then return true
or something like:
HAS_ANY_VALUES(MAT_ID,Material_table[MAT_ID])
Thanks a lot!
(I couldnt find any solution for that in the forums - We are using MDM 5.5. SP6)

See thread: "How to create a validation that access another MDM-Table?" in this forum.

Security based on the position and responsibility of Siebel tables.

Hi Forum,
We have a requirement to show some reports based on OLTP (Siebel Base tables with S_) tables. so we have created a repository and created few reports in OBIEE.
Now we want to implement security based on these tables. Like siebel users will be accessing these reports, So how do we implement security based on the position and responsibility of Siebel tables.
I request to share any links or docs pertaining to above mentioned implementation.
Thanks

Could be interference
AirPort and Bluetooth: Potential sources of wireless interference
Try:
- Reseting the BT headset
- Reset the iOS device. Nothing will be lost
Reset iOS device: Hold down the On/Off button and the Home button at the same time for at
least ten seconds, until the Apple logo appears.
- Reset network settings: Settings>General>Reset>Reset Network Settings. You will have to rejoin all wifi networs and re-pair all BT devices

Application express security based on table values

Similar Messages

Maybe you are looking for