Redevelop oracle forms login screen in adf

Question

hi i have the login screen in my oracle forms application which do the following
-able the user to login in the application,by the username,password which are store in the table
-in my screen i got the following username and password column and the login button.
-the login button got two trigger> when-button-pressed and when-new-item-instance
-i also have an option for new user to type new password and confirm the password when they start,every new user got default password and is force to change the password before login in the application
-when the application start it does not show the new password column only if the user is new and when user password has been resert which is done by system admistrator.
-i have one screen which list all the user in the application where system administrator can resert the password by clicking the button
-i also have change password button which come if the user is new under this button i only have one trigger when-button-pressed which got
-the user is the only person who enter the new password the system admistrator only resert the password he does not have option to enter new password
if :logon.pwd is null then
sms_code.error_message('SMS-'||to_char(0000002)||': '||'Password must be specified','', 'E', 'SMS');
end if;
login_pwd_title;
perform_sdms_new_password;
under my when-button-pressed trigger i got
:logon.logon_ind := 1;
perform_sdms_logon;
and under my when-new-item-instance trigger i got
if nvl(:logon.logon_ind,0) = 1 then
     :logon.logon_ind := 0;
else     
if :logon.usr_id is not null
and :logon.pwd is not null then
:logon.logon_ind :=1;
perform_sdms_logon;
end if;
end if;
and my perform_sdms_logon sp is below. which is in the form programm unit
PROCEDURE perform_sdms_logon IS
error_message varchar2(100);
usr_id integer;
fail_cnt integer;
fail_limit integer;
pwd sms_users.pwd%type;
pwd_dt date;
pwd_dt_period integer;
sysdt date;
msg_lvl varchar2(20) := :system.message_level;
cursor usr is
select id,pwd_change_dt,sysdate,pwd,login_failure_count
from sms_users
where user_id = :logon.usr_id
-- and pwd = sms_secure.crypt('USR',id,:logon.pwd)
BEGIN
set_clnt_details;
if :logon.usr_id is null then
     error_message := 'User id must be specified';
sms_code.error_message('SMS-'||to_char(0000001)||': '||error_message,'', 'E', 'SMS');
end if;
if :logon.pwd is null then
     error_message := 'Password must be specified';
sms_code.error_message('SMS-'||to_char(0000002)||': '||error_message,'', 'E', 'SMS');
end if;
pwd_dt_period := sms_global.ref_code('SMS','PWD_PERIOD',30,1);
fail_limit := sms_global.ref_code('SMS','PWD_FAIL_LIMIT',3,1);
open usr;
fetch usr into usr_id,pwd_dt,sysdt,pwd,fail_cnt;
if usr%NOTFOUND then
close usr;
          sms_alog.record(:global.clnt_user
,:global.clnt_host_name ||':'||:global.clnt_ip_addr
,'Logon'
,:logon.usr_id
,'Not SMS User'
,:logon.usr_id
,'sms0000');
     error_message := 'Logon to SMS Denied';
sms_code.error_message('SMS-'||to_char(0000003)||': '||error_message,'', 'E', 'SMS');
end if;
close usr;
if fail_cnt > fail_limit then
               sms_alog.record(:global.clnt_user
,:global.clnt_host_name ||':'||:global.clnt_ip_addr
,'Logon - PWD'
,:logon.usr_id ||':'||fail_cnt||':'||fail_limit
,'Password retry limit exceeded'
,:logon.usr_id
,'sms0000');
     error_message := 'Password error limit have been exceeded contact the Administrator';
sms_code.error_message('SMS-'||to_char(0000014)||': '||error_message,'', 'E', 'SMS');
end if;      
if pwd <> sms_secure.crypt('USR',usr_id,:logon.pwd) then
sms_global.set_user_id(:logon.usr_id);
     update sms_users
     set login_failure_count = nvl(login_failure_count,0) + 1
     where id = usr_id
     :system.message_level := 15;
               sms_alog.record(:global.clnt_user
,:global.clnt_host_name ||':'||:global.clnt_ip_addr
,'Logon - PWD Error'
,:logon.usr_id ||':'||:logon.pwd
,'Wrong user Password'
,:logon.usr_id
,'sms0000');
     commit;
     :system.message_level := msg_lvl;
     error_message := 'Logon to SMS Denied';
sms_code.error_message('SMS-'||to_char(0000003)||': '||error_message,'', 'E', 'SMS');
else
     if fail_cnt > 0 then
     update sms_users
     set login_failure_count = 0
     where id = usr_id
               sms_alog.record(:global.clnt_user
,:global.clnt_host_name ||':'||:global.clnt_ip_addr
,'Logon - PWD Correct'
,:logon.usr_id
,'Reset Failed count'
,:logon.usr_id
,'sms0000');
     :system.message_level := 15;
     commit;
     :system.message_level := msg_lvl;
end if;           
               sms_alog.record(:global.clnt_user
,:global.clnt_host_name ||':'||:global.clnt_ip_addr
,'Logon - PWD Correct'
,:logon.usr_id
,'Success'
,:logon.usr_id
,'sms0000');
end if;
if trunc(pwd_dt + pwd_dt_period) < sysdt then
     login_pwd_title;
hide_an_item('logon.new_pwd1',1);
hide_an_item('logon.new_pwd2',1);
               sms_alog.record(:global.clnt_user
,:global.clnt_host_name ||':'||:global.clnt_ip_addr
,'Logon - PWD Expired'
,:logon.usr_id
,'Password use Expired'
,:logon.usr_id
,'sms0000');
     error_message := 'Password Expired. Please change password.';
sms_code.error_message('SMS-'||to_char(0000004)||': '||error_message,'', 'E', 'SMS');
end if;      
sms_global.set_user_id(:logon.usr_id);
:global.User := :logon.usr_id;
validate_usr_profiles (:logon.usr_id);
END;
and my validate_usr_profiles is
PROCEDURE validate_usr_profiles (i_usr varchar2) IS
cnt number := 0;
clnt_user varchar2(80);
clnt_ip_addr varchar2(30);
clnt_host_name varchar2(80);
novell_user number;
single_terminal number;
found boolean;
l_usr_id integer;
BEGIN
select count(*) ,usr.id
into cnt,l_usr_id
from sms_user_roles urol
,sms_users usr
where user_id = i_usr
and usr.id = usr_id
group by usr.id
if cnt = 0 then
     sms_code.error_message('SMS-'||to_char(0000020)||':No profiles have been granted.', '', 'E', 'SMS');
     exit_form;
end if;     
novell_user := sms_global.ref_code('SMS','NOVELL_USER',1,1);
if novell_user = 1 then
     if lower(:global.clnt_user) <> lower(i_usr) then
          sms_alog.record(:global.clnt_user
,:global.clnt_host_name ||':'||:global.clnt_ip_addr
,'Logon'
,i_usr ||':'||novell_user
,'Not Novell User'
,i_usr
,'sms0000');
          sms_code.error_message('SMS-'||to_char(0000019)||':User id not same as Host User.', clnt_user, 'E', 'SMS');
     end if;
end if;      
single_terminal := sms_global.ref_code('SMS','SINGLE_TERMINAL',1,1);
if single_terminal = 1 then
     found := false;
     for c_uscon in (select * from sms_user_session_controls
     where usr_id = l_usr_id ) loop
     found := true;      
     if c_uscon.status = 0 then -- not logged on
     update sms_user_session_controls
     set status = 1
     ,status_date = sysdate
     ,computer_name = :global.clnt_host_name
     ,ip_addr = :global.clnt_ip_addr
     ,connections = 1
     where usr_id = l_usr_id
     commit;
     else
     if c_uscon.computer_name = :global.clnt_host_name
     and c_uscon.ip_addr = :global.clnt_ip_addr then
     update sms_user_session_controls
     set status_date = sysdate
     ,connections = connections + 1
     where usr_id = l_usr_id
     commit;
     else
          sms_alog.record(:global.clnt_user
,:global.clnt_host_name ||':'||:global.clnt_ip_addr
,'Logon'
,c_uscon.computer_name ||':'||:global.clnt_host_name||':'||c_uscon.ip_addr||':'||:global.clnt_ip_addr
,'Multiple Session Failure'
,i_usr
,'sms0000');
          sms_code.error_message('SMS-'||to_char(0000021)||':User Logged onto computer ', c_uscon.computer_name, 'E', 'SMS');
     end if;
     end if;
end loop;
     if not found then
          insert into sms_user_session_controls
          (usr_id,computer_name,ip_addr,status,status_date,connections)
          values
          (l_usr_id,:global.clnt_host_name,:global.clnt_ip_addr,1,sysdate,1);
          commit;
     end if;
end if;      
check_application_system;
END;
if there is more information you like from me ,you can ask
my login_pwd_title sp is
PROCEDURE login_pwd_title IS
BEGIN
set_item_property('logon.CHANGE_PWD',label,'Login & Change Password');
END;
and my perform_sdms_new_password sp ;
PROCEDURE perform_sdms_new_password IS
error_message varchar2(100);
usr_id integer;
fail_cnt integer;
fail_limit integer;
pwd_dt date;
pwd varchar2(50);
pwd_dt_period integer;
pwd_history sms_users.pwd_history%type;
sysdt date;
pwd_length integer;
pwd_special integer;
pwd_numeric integer;
pwd_alpha integer;
pwd_list integer;
o_aplha integer;
o_number integer;
o_special integer;
new_pwd sms_users.pwd%type;
prev_pwd sms_users.pwd%type;
new_pwd_history sms_users.pwd_history%type;
msg_lvl varchar(20) := :system.message_level;
cursor usr is
select id,pwd_change_dt,sysdate,pwd,pwd_history,login_failure_count
from sms_users
where user_id = :logon.usr_id
--and   pwd     = sms_secure.crypt('USR',id,:logon.pwd)
BEGIN
set_clnt_details;     
if get_item_property('logon.new_pwd1',visible) = 'FALSE' then
hide_an_item('logon.new_pwd1',1);
hide_an_item('logon.new_pwd2',1);
else
if :logon.usr_id is null then
     error_message := 'User id must be specified';
sms_code.error_message('SMS-'||to_char(0000001)||': '||error_message,'', 'E', 'SMS');
end if;
if :logon.pwd is null then
     error_message := 'Password must be specified';
sms_code.error_message('SMS-'||to_char(0000002)||': '||error_message,'', 'E', 'SMS');
end if;
pwd_dt_period := sms_global.ref_code('SMS','PWD_PERIOD',30,1);
fail_limit := sms_global.ref_code('SMS','PWD_FAIL_LIMIT',3,1);
open usr;
fetch usr into usr_id,pwd_dt,sysdt,pwd,pwd_history,fail_cnt;
if usr%NOTFOUND then
close usr;
          sms_alog.record(:global.clnt_user
,:global.clnt_host_name ||':'||:global.clnt_ip_addr
,'Logon'
,:logon.usr_id
,'Not SMS User'
,:logon.usr_id
,'sms0000');
     error_message := 'Logon to SMS Denied';
sms_code.error_message('SMS-'||to_char(0000003)||': '||error_message,' Password can only change after a successful logon', 'E', 'SMS');
end if;
close usr;
if fail_cnt > fail_limit then
               sms_alog.record(:global.clnt_user
,:global.clnt_host_name ||':'||:global.clnt_ip_addr
,'Logon - PWD'
,:logon.usr_id ||':'||fail_cnt||':'||fail_limit
,'Password retry limit exceeded'
,:logon.usr_id
,'sms0000');
     error_message := 'Password error limit have been exceeded contact the Administrator';
sms_code.error_message('SMS-'||to_char(0000014)||': '||error_message,'', 'E', 'SMS');
end if;      
if pwd <> sms_secure.crypt('USR',usr_id,:logon.pwd) then
     error_message := 'Logon to SMS Denied';
sms_global.set_user_id(:logon.usr_id);
     update sms_users
     set login_failure_count = nvl(login_failure_count,0) + 1
     where id = usr_id
                    sms_alog.record(:global.clnt_user
,:global.clnt_host_name ||':'||:global.clnt_ip_addr
,'Logon - PWD Error'
,:logon.usr_id ||':'||:logon.pwd
,'Wrong user Password'
,:logon.usr_id
,'sms0000');
     :system.message_level := 15;
     commit;
     :system.message_level := msg_lvl;
sms_code.error_message('SMS-'||to_char(0000003)||': '||error_message,'', 'E', 'SMS');
end if;
if :logon.new_pwd1 is null then
     error_message := 'New Password must be specified';
sms_code.error_message('SMS-'||to_char(0000005)||': '||error_message,'', 'E', 'SMS');
end if;      
pwd_length := sms_global.ref_code('SMS','PWD_LENGTH',6,1);
pwd_special := sms_global.ref_code('SMS','PWD_SPECIAL',1,1);
pwd_numeric := sms_global.ref_code('SMS','PWD_NUMERIC',1,1);
pwd_alpha := sms_global.ref_code('SMS','PWD_ALPHA',1,1);
pwd_list := sms_global.ref_code('SMS','PWD_LIST',24,1);
if length(:logon.new_pwd1) < pwd_length then
     error_message := 'New Password must be of length ';
sms_code.error_message('SMS-'||to_char(0000009)||': '||error_message,' ' || pwd_length ||' characters', 'E', 'SMS');
end if;
find_special(:logon.new_pwd1,o_aplha,o_number,o_special);
if o_special < pwd_special then
     error_message := 'New Password must contain at least ';
sms_code.error_message('SMS-'||to_char(0000010)||': '||error_message,' ' || pwd_special ||' special characters', 'E', 'SMS');
end if;      
if o_number < pwd_numeric then
     error_message := 'New Password must contain at least ';
sms_code.error_message('SMS-'||to_char(0000011)||': '||error_message,' ' || pwd_numeric ||' numeric(s)', 'E', 'SMS');
end if;      
if o_aplha < pwd_alpha then
     error_message := 'New Password must contain at least ';
sms_code.error_message('SMS-'||to_char(0000011)||': '||error_message,' ' || pwd_alpha ||' alphabetic charater(s)', 'E', 'SMS');
end if;      
if :logon.new_pwd1 = :logon.pwd then
     error_message := 'New Password can not be the same as old password';
sms_code.error_message('SMS-'||to_char(0000006)||': '||error_message,'', 'E', 'SMS');
end if;      
if :logon.new_pwd1 <> nvl(:logon.new_pwd2,:logon.pwd) then
     error_message := 'New password are not equal values - retry';
sms_code.error_message('SMS-'||to_char(0000007)||': '||error_message,'', 'E', 'SMS');
end if;      
for i in 1..pwd_list loop
     if utility.get_field(i,pwd_history||'~~','~') is null then
          exit;
     end if;
prev_pwd := sms_secure.decrypt('USR',usr_id,utility.get_field(i,pwd_history,'~'));
     if :logon.new_pwd1 = prev_pwd then
               sms_alog.record(:global.clnt_user
,:global.clnt_host_name ||':'||:global.clnt_ip_addr
,'Logon - PWD Used'
,:logon.usr_id
,'Password have been used'
,:logon.usr_id
,'sms0000');
     error_message := 'New password was found in history list - retry';
sms_code.error_message('SMS-'||to_char(0000012)||': '||error_message,'', 'E', 'SMS');
end if;           
end loop;
new_pwd := sms_secure.crypt('USR',usr_id,:logon.new_pwd1);
new_pwd_history := utility.put_hash(pwd_list,'~');
for i in 1..pwd_list loop
     new_pwd_history := utility.put_field(i+1,utility.get_field(i,pwd_history,'~'),new_pwd_history,'~');
end loop;
new_pwd_history := utility.put_field(1,new_pwd,new_pwd_history,'~');
update sms_users
set pwd = new_pwd
,pwd_history = new_pwd_history
,pwd_change_dt = sysdate
where user_id = :logon.usr_id
               sms_alog.record(:global.clnt_user
,:global.clnt_host_name ||':'||:global.clnt_ip_addr
,'Logon - PWD Change'
,:logon.usr_id
,'Success'
,:logon.usr_id
,'sms0000');
commit;
sms_global.set_user_id(:logon.usr_id);
:global.User := :logon.usr_id;
validate_usr_profiles (:logon.usr_id);
end if;
END;
i hope this will make it clear of what am trying to achive your help will be appriciated
Edited by: user603350 on 2012/01/04 10:48 AM

Answer 1

On your login page have 2 fields for username and password. On the button click call a AM Impl method which calls your above procedure passing the required fields.
This is the way you can call a prodecure/function from AM IMPL
cstmt = getDBTransaction().createCallableStatement("{call pkg.procedurename(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)}", getDBTransaction().DEFAULT);