Application security /access by only designated users

Question

Hi All,
I am very new to this great application, so please help.
I am using HTML DB 2.1 .
I have multiple application in a schema. A end user of one application can access all the other applications of the same schema by just changing the application ID in the URL, How can I prevent it.
Thank in advance.

Answer 1

Create user groups and assign your groups to your users depending on what they should or shouldn't access.
On your login page (101) create a validation on submit using the following code - PL/SQL Function returning Boolean:
DECLARE
   v_group   VARCHAR2 (400) DEFAULT NULL;
BEGIN
   SELECT HTMLDB_UTIL.get_groups_user_belongs_to (UPPER(:P101_USERNAME))
     INTO v_group
     FROM DUAL;
   IF INSTR ( v_group, 'YOUR_GROUP_1') > 0
   THEN
      RETURN TRUE;
   ELSE
      RETURN FALSE;
   END IF;
END;Denes Kubicek
http://deneskubicek.blogspot.com/
http://www.opal-consulting.de/training
http://apex.oracle.com/pls/otn/f?p=31517:1
-------------------------------------------------------------------