Database Accounts AR, AP, GL
Do the AR, AP, GL Database accounts have access to all Oracle EBS receivables, payabales, ledger data in the Database, or are some tables/views restricted from these accounts?
Is there any document that details which AR, AP, GL tables/views contain the more sensitive data?
user599292 wrote:
Do the AR, AP, GL Database accounts have access to all Oracle EBS receivables, payabales, ledger data in the Database, or are some tables/views restricted from these accounts?
Is there any document that details which AR, AP, GL tables/views contain the more sensitive data?Hi user i suggest check [e-trm site|etrm.oracle.com] for table relations in EBS, i belive it can be helpful for you
Regard
Helios
Similar Messages
-
How to find out who is locking my database account ?
Hi,
Which dynamic view can help me to find out who is locking my database account ?
ThanksYoav wrote:
Hi,
Which dynamic view can help me to find out who is locking my database account ?
Thanksdoes account have PROFILE?
if so, repeated failed logons can result in locked account.
enable AUDIT to see from where logins originate. -
How to create an database account authentication scheme in apex
Dear
I have an apex installation (embeded) on oracle 11g.
I want to create a database account authentication scheme in apex. I have seen the page with different tab like name,subsription,source,session not valid, login processing, logout URL,session cookie attributes and comments.
I want to know what are the things to be specifed on these tabs and the effects. I have gone thru the documentation 'Application Builder User’s Guide Release 4.1' , but the functionalities of these tabs are not mentioned.
Please help.
Dennis
Edited by: Dennis John on Feb 28, 2012 10:57 PMThanks to dear Jit
I am new to apex.
I have gone thru that documents but I couldn't find any detailed documentation about the database account authentication scheme configuration
The database account authentication scheme creation interface will show tabs like name,subsription,source,session not valid, login processing, logout URL,session cookie attributes and comments.
I want to know what are the things to be specifed on these tabs and how it will reflect in the login. The specified documentation is not giving any detail about the above mentioned tabs of authentication scheme creation iwizard.
And also I want to know how the applciation user will be mapped to the database account?
As per my understanding a database user (for each run time user) is required for to authenticate the apex run time login other than the applciation schema user (holds the objects of applicaiton)
run time user means - end user who uses the applcaition, not the developer.
Please help.
Dennis -
APEX Database Account Authentication Problem
Hi There
I'm developing an application in APEX 3.1 on top of an Oracle 10g database. The schema account ABC has full control of all objects but additional users have been added USER1 for example. When I set the authentication of the APEX application to Database Account I am able to login as ABC but not when I use USER1. The errors I receive are:
ORA-28007: the password cannot be reused ORA-06512: at "APEX_030200.WWV_FLOW_SECURITY", line 248 ORA-06512: at "SYS.WWV_FLOW_VAL", line 55 ORA-06521: PL/SQL: Error mapping function
ERR-10480 Unable to run authentication credential check function.
I haven't used any custom funtions, pages or procedures, even tried starting a new app from scratch and still am not able to login.
Thanks
DanielThanks Varad, but I was able to log in to PL/SQL Developer using the USER1 credentials. I have found the problem though, the Oracle database was an older version than this APEX functionality could work with. We upgraded the database and now I can log in fine.
-
Database Account Credentials Authentical Failure
Hello All,
I've set my Authentication Scheme in APEX to Database Account credentials (I have Oracle 10+ installed). However, when I login I get the following errors. Can someone please advise?
ORA-28007: the password cannot be reused
ORA-06512: [b]at "FLOWS_020200.WWV_FLOW_SECURITY", line 221
ORA-06512: at "SYS.WWV_FLOW_VAL", line 49
ORA-06521: PL/SQL: Error mapping function
Error ERR-10480 Unable to run authentication credential check function.
ThanksHi Scott:
Thanks for the clarification with Default User profile.
In my database, the authetication works for all the profiles that have DEFAULT PROFILE. However, doesn't work for DB accounts that don't belong to DEFAULT profile(these users have profile called ENDUSER_PROFILE).
So, how and where can I define multiple profiles as VALID for the Database Account authentication?
Thanks for your help!
Muni -
Database Account and User Groups
Hello,
Currently, I am using DATABASE ACCOUNT for an authentication scheme for all of my applications but, I would like to setup User Groups as well to limit users to thier prospective pages and/or objects within the application for easy maintenance of users. I have read that, in order to apply user groups in an application, you must use APPLICATON EXPRESS ACCOUNT credentials.
Another developer has modified the "APEX_ACCESS_CONTROL" table with an additional column(s) that would allow access to specific pages. I am not sure if this is good practice to modify Apex tables.
Is there a way to create user groups while using DATABASE ACCOUNT for authentication? What is the best practice in a case like this?
Can anyone please shed some light on this? Thanks.
- DeeDee,
I would like to setup User Groups as well to limit users to thier prospective pages and/or objects within the application for easy maintenance of users.I'm not clear on what your purpose is, just runtime authorization, or something more?
Another developer has modified the "APEX_ACCESS_CONTROL" table with an additional column(s) that would allow access to specific pages. I am not sure if this is good practice to modify Apex tables.Those tables belong to your application's parsing schema and they are accessed only by code in applications you develop. The Application Express machinery knows nothing about them.
Is there a way to create user groups while using DATABASE ACCOUNT for authentication?You can create your own tables to define groups and to keep track of which named accounts belong to which groups. And you can write an API for applications to use to query this information and to maintain it from custom applications built for that purpose.
All -
I have the following questions:
1. I currently have APEX 2.0 in 3 databases. How can I upgrade them to APEX 2.2? APEX 2.0 uses the tablespaces called HTMLDB and FILES.
2. How can I use database account credentials in APEX 2.2? Is there any detailed instruction on the Website?
Thanks.
AndyDownload 2.2 and use the upgrade installation option. I don't understand the part about tablespaces.
About the authentication scheme, just create an authentication scheme and select the new method and try it out.
Detailed instructions on the website? What website or URL?
Scott -
Database authentication & database account profiles
Hi,
Is anyone aware of any sample applications that uses database acccount profiles for password policies like ageing, length, reuse and so on.
I've searched the forums but havn't found any links
Has anyone experience in this field
Many thanks
PeteRoger,
The authentication code and the general steps to hook it up are posted in this thread: Re: Custom Authentication
As far as checking profile settings and account status, I would run these checks in processes on your after-login page. If there are exceptions, the user can respond to them on that page. If there are no exceptions, the page should branch to the start-of-application page of your choice. How you access this profile/account information for the authenticated user is up to you to figure out. Keep in mind that you will not be connected as the database account you authenticated against, so there is really no "active" profile involved. Your application's parsing schema will need to be granted access to whatever dictionary views it needs for this purpose.
Good luck,
Scott -
Database Account Authentication to a few users.
Good Morning, apex teachers.
I have one more doubt about apex.
This time is related to Database Account Authentication.
I was wondering if it would be possible to filter which database users
can logon to my application?
For instance I have this users on my database: John, Paul, Ringo and George.
But I only want to John and Paul be able to logon, if Ringo or George try to
do the same, they would have their access denied.
Thanks for all the help you guys have been giving to me.
Regards, Leandro Freitas."Database Account Credentials
Database Account Credentials utilizes database schema accounts. This authentication scheme requires that a database user (schema) exist in the local database. When using this method, the user name and password of the database account is used to authenticate the user.
Database Account Credentials is a good choice if having one database account for each named user of your application is feasible and account maintenance using database tools meets your needs"
You are trying to use schemas or do you have a table with the beatles users and passwords? Don't let Ringo out man... ;) -
Level of permission on database account
Hi All!
About to install RoboHelp Server 8.
We've created a SQL database and a RoboHelp username and password for that database.
For the install of RoboHelp Server 8 I'm assuming the db account needs DBO permissions (full owner).
Our DBA group however does not like leaving accounts with DBO permission.
After install can the level of permission for the database account be lowered? to say modify or read/write?
Thanks for the info!
FrankHi Frank and welcome to the RH forums.
When you first start the RHS it is not connected to the DB. You have to specify logon details for a user with full admin rights. This is used to create an Admin group and user complete with various permissions so the admin rights are definitely used there. You'd then be creating other users, groups, permissions requiring admin rights on the logon.
Perhaps (I'm not sure) that you could get away with read/write access if all you were doing was maintaining areas, running reports, etc. However you'd have to get admin rights each time you need to create/amend/delete users or contexts. Personally I wouldn't have thought it was worth the hassle.
If you go back to your DBA and remind them that only you has access to the Config Manager where the DB security can be compromised, would this appease them?
The RoboColum(n)
@robocolumn
Colum McAndrew -
Authentication using database accounts (EJB)
Hi.
I'm developing a web app(struts, jsp). Users should log-in using their Oracle
database accounts (created with CREATE USER ...). Is it possible to accomplish that using EJB? How?
I've read that i can somehow map application server's users with database users
using sql authentication providers: Wouldn't then sql queries made by ejbs
still be executed with the same user every time?Normally application servers use a shared login to allow using a shared connection pool, and avoid the cost of logging in and out.
Are you using JPA or the native TopLink API? Are you using JTA?
TopLink / EclipseLink have several features for user logins.
You can use Oracle proxy connections, these allow a shared connection pool to be used, but allow setting a proxy user on the connection.
See, org.eclipse.persistence.config.PersistenceUnitProperties.ORACLE_PROXY_TYPE
You can also use real database logins with JPA (or ServerSession) through using a JPA EntityManager properties or a ConnectionPolicy.
See, org.eclipse.persistence.config.EntityManagerProperties, org.eclipse.persistence.sessions.server.ConnectionPolicy.
You also have the option of using a shared login for reads, and a user login for writes.
If you are using the native API, you can also use DatabaseSessions.
James : http://www.eclipselink.org -
PUBLIC database account on oracle 10g - what are the default privilages?
Hi there,
I was wondering what are the default privileges to PUBLIC database account on oracle 10g R2. Could somebody explain it? Thank you in advance.There is not a user PUBLIC. There cannot be a user PUBLIC. Users and roles share the same name space so if there is a role PUBLIC, there can not be a user PUBLIC.
The catalog table user$ contains both roles and users. The usage is determined by the TYPE# column - 1 = user, 0 = role.
select user#, name, type# from user$ order by 1
sys@esdb01:pncl# /
USER# NAME TYPE#
========== ============================== ==========
0 SYS 1
1 PUBLIC 0
2 CONNECT 0
3 RESOURCE 0
4 DBA 0
5 SYSTEM 1Try it yourself and see.
SQL> create role foo;
Role created.
SQL> create user foo identified by bar;
create user foo identified by bar
ERROR at line 1:
ORA-01920: user name 'FOO' conflicts with another user or role name -
Authentication Scheme - Database Account with login user exists in table
Hi all,
I m new to APEX. Could anyone tell me how can i modify the authentication scheme to validate the user by Database Account DB user & password, also the username must exist in a table
As the DB is not only designed for one application, so DB account may incl. DB users more than the users who can access the APEX application. So I must check the user name exists in a table also.
Thx.Scott,
I try to save the msg in application item and set the message by application item in process before header, it works perfect. The message display as what i want :)
One more question is i would like to give this link to user will go let the user go to the target page and can edit the page without doing any searching b4.
http://XXX/apex/f?p=115:3::NO:::P3_ID:82
If the user hvnt login, system will prompt login page, after the user login it, it will direct go to the target page. I have try if the user type in a wrong username / password it still work after i retype a correct one. The page can redirect to the target page.
However, if i type in a user name & password is correct but not exist in my define table like what i stated b4. Then i type in a correct one I can just go to page 1 instead of the target one.
How can i do the same thing?
Sorry for non-stop questioning, but pls help. Thanks a lot. -
Accessing several applications after logging into database account once
I have several applications with authentication against database accounts. I would like to create a situation in which users only have to log in once and are able to use all the applications they are allowed to use afterwards without having to log in again.
Has anyone already got a solution for this problem?
Your suggestions are very welcome,
Greets, DikI understand that it is possible for applictions within one workspace. These applications share the same session.
What applications share the same session? Applications belonging to the same workspace that might operate at the same time? As a generic rule? No, this is not the case. Those applications share the same session only if you intend them to, but they need not.
Applications that do not belong to the same workspace cannot share the same session.
Single Sign-On (without a login server) is something you'd have to cook up yourself. That would have nothing to do with session-sharing but rather the ability of multiple applications to reference some artifact outside the application (a session cookie, an HTTP header value, a combination of those, ...) that would help it identify that authentication (by some trusted authority) had occurred. Each application could then do its own session management independent of that finding.
Scott -
How to diseable database accounts
Hello
How to disable database accounts so that only Apex users are enabled on an internet site based on xe database.
Thanks in advanceYou can lock the accounts. Refer to the ALTER USER command in the SQL Reference guide. (http://download-east.oracle.com/docs/cd/B19306_01/server.102/b14200/statements_4003.htm#i2058207)
E.g.
ALTER USER <username> ACCOUNT LOCK
There are other methods too. For example, if you revoke the CREATE SESSION priv from a user, the a client session cannot be created using that user as logon.
Maybe you are looking for
-
Error while executing the the SQL on top of Analytical view
Hi all, below is the generic pattern of the query I am using on my Analytic view, Select a. col1, a.col2, a. sum(col3) from _SYS_BIC.SIMPLE_AN_VW a where a. col3_date_field > a. col4_date_field and a. col5<=15 group by a.col1,a.col2; I am getting th
-
Can't delete email with a 9 mb attachment from iphone
can't delete email with a 9 mb attachment from iphone(3gs, software v 4.3.1) -- every time i try to delete the email with a swipe it shows the red delete button on the right but then freezes for a while and then the delete button disappears but the e
-
Can UCCHECK be performed on already UNICODE migrated system during ECC upgr
Hi there, Can UCCHECK be performed on already UNICODE migrated system during ECC upgrade? If NO, why? What is the technical reason? Prakash
-
HT1353 can you help me how to install applications on my ipod ma623c
can you help me how to install applications on my ipod ma623c
-
I got up this morning and I can't keep the calendar open. I rebooted the iPad to see if that would fix it and it didn't.