Restrict Form & Reports Pages but allow users to Save their Records

Question

Hi
I have a database with Forms & editable Reports pages.
I have also created a table with certain 'Admin Levels' of access so that users with the 'ADMIN_LEVEL' = 1 cannot access the editable reports pages.
I find that applying the below restriction stops those users from accessing the reports but also won't allow those users to save any records.
select USER_ID
from USERS
where USER_ID=:APP_USER
and ADMIN_LEVEL > 1
I then thought I could create a new page of the report but make it uneditable & use the 'Create' button to save the record to the table, but this doesn't work.
My question is, how can I restrict access to a reports page but still allow records from restricted users to be saved?
Thanks

Answer 1

Hi,
Firstly, you should look into Authorization Schemes: [http://download.oracle.com/docs/cd/E14373_01/appdev.32/e11838/sec.htm#BABCAGAB]
I would suggest you create a scheme to identify admin users called, say, ADMIN_USER. This could be an EXISTS SQL query scheme of something like:
SELECT 1
FROM USERS
WHERE UPPER(USER_ID) = UPPER(v('APP_USER'))
AND ADMIN_LEVEL = 1Then, on any item within your application, you have an Authorization Scheme setting. You can then set this to either "ADMIN_USER" or "{not}ADMIN_USER" to determine which user can have access to that item. "{not}ADMIN_USER" is any user where the above query would return no records.
Using this, you could grant access to a page, but stop access to a button and/or process. You don't, for example, have to set a scheme for the page itself (you can leave the setting as "- No Authorization Required -", so everyone can get to the page), but you can then set a Scheme for a button on that page. If the user is an ADMIN_USER and you have set a button for {not}ADMIN_USER, that user won't get the button on the page (you should also make the same setting on any process that this button triggers).
But, if you set the page's Scheme to {not}ADMIN_USER, any ADMIN_USER will not even be able to get to the page.
Andy