MRU - trying to restrict UPDATE to only certain users - everyone INSERT

Question

Application Express 2.2.1.00.04
I’m looking for a solution to a problem. I have a region that is a multi-row SQL Query (Updateable). Everything works as expected. Now, I’d like to restrict the ability to update ANY rows based upon an authorization scheme.
I want everyone accessing my application to be able to insert rows (WORKS FINE).
I only want certain authorized people to be able to update existing rows (CAN’T GET THIS TO WORK).
Anyone have any ideas?
Thanks, Mike

Answer 1

Hi Mike,
I think you have two possibilities:
1) Create a page validation with some similar code:
DECLARE
    vHasUpdatePriv BOOLEAN := apex_util.public_check_authorization('MY_AUTHORIZATION_SCHEME');
    vExists NUMBER;
BEGIN
    FOR ii IN 1 .. Apex_Application.g_f01.COUNT
    LOOP
        IF [check if record has changed by comparing against MD5 checksum]
          AND Apex_Application.g_f01(ii) IS NOT NULL -- I assume f01 stores the PK
          AND NOT vHasUpdatePriv
        THEN
            RAISE_APPLICATION_ERROR(-20123, 'You try to update, but you don''t have update privileges!');
        END IF;
    END LOOP;
END;Or if you don't want to care how to check if a record has changed, take a look at http://inside-apex.blogspot.com/2006/12/plug-play-tabular-form-handling.html
With that library the code would look like:
DECLARE
    vHasUpdatePriv BOOLEAN := apex_util.public_check_authorization('MY_AUTHORIZATION_SCHEME');
    vExists NUMBER;
BEGIN
    FOR ii IN 1 .. ApexLib_TabForm.getRowCount
    LOOP
        IF    ApexLib_TabForm.hasRowChanged(ii)
          AND ApexLib_TabForm.NV('YOUR_PK_COLUMN') IS NOT NULL
          AND NOT vHasUpdatePriv
        THEN
            ApexLib_Error.raiseError
              ( pError => 'You try to update, but you don''t have update privileges!'
        END IF;
    END LOOP;
END;2) You could write your own MRU process, which does the same as above, but additionally you also have to check for lost-update-detection, ...
Hope that gives you a direction
Patrick