Session controlled procedure from url

Hi,
Following the examples I was able to create a procedure that can be called from the apex url. But is there a way to make access to these prcedures session based? Wich user do I have to grant execute permission to so only logged on users are able to access the procedure. All examples talk about granting permissions to public or htmldb_public_user but this results in everybody being able to acess the procedure. But is seems to be this or no access.
Thanks for all help or suggestions,
Geert
Edited by: Geert on May 19, 2010 4:58 AM

Hi,
Maybe there is way but why you do not call procedure in Apex page process before header ?
htp.init;
htp.flush;
my_procedure;
apex_application.g_unrecoverable_error := true;Then only users that are authenticated to your app can see content that procedure output
Br,Jari

Similar Messages

403 Forbidden error calling PL/SQL Procedure from URL

I am getting a 403 Forbidden browser error when calling a PL/SQL procedure from the URL, as in this:
http://<server.port>/apex/SCHEMA.procedure_name/f?p_param1=394&p_param2=2, etc
We are upgrading from HTMLDB 2.0 to APEX 4.0.2. I do not believe the upgrade has anything to do with it, c/o the upgraded app works fine in another APE 4.0.2 environment.
The upgrade is to new machines, new DB and new app server, Oracle Web Tier, Oracle HTTP server deployment.
The dads.conf entries are fine, all standard:
Alias /i/ "/apexd01/app/oracle/product/http/Oracle_WT1/ohs/images/"
Alias /c/ "/apexd01/app/oracle/product/http/Oracle_WT1/ohs/custom_htmldb/"
<Location /pls/apexd>
Order deny,allow
PlsqlDocumentPath docs
AllowOverride None
PlsqlDocumentProcedure wwv_flow_file_mgr.process_download
PlsqlDatabaseConnectString dbserver.us.com:1521:SERVER.US.COM ServiceNameFormat
PlsqlNLSLanguage AMERICAN_AMERICA.AL32UTF8
PlsqlAuthenticationMode Basic
SetHandler pls_handler
PlsqlDocumentTablename wwv_flow_file_objects$
PlsqlDatabaseUsername APEX_PUBLIC_USER
PlsqlDefaultPage apex
PlsqlDatabasePassword apexpwd
PlsqlRequestValidationFunction wwv_flow_epg_include_modules.authorize
Allow from all
</Location>
The GRANT EXECUTE ON procedure TO PUBLIC is there.
A call to the same procedure via a process in an APEX page works fine - the procedure is OK.
The call from javascript, which sets up the call from the URL, is the one that fails with the 403 Forbidden error.
The same app works fine in another APEX 4.0.2 environment, so I know it is not the JS; It has to be some configuration setting in this environment.
I do NOT have access to the app server.
I have asked that they compare the httpd.conf, and all underlying conf files, to check for differences.
In order for me to be more specific, and hopefully speed up the troubleshooting process, can anyone suggest what other settings to look at?
Thank you - Karen

Hello,
Good catch, but the difference in URL is in fact the difference in my env to theirs. My typo in not correcting my example to match the dads.conf entry of /pls/apexd. My env uses /apex/. Just saves on my typing.
As an update, I asked the DBA to double-check, and yes, the www_flow_epg_include_mod_local function IS there.
www_flow_epg_include_mod_local is an APEX function.
So now we are trying adding procedures to it. I'll let you know if it works.
My previous question remains - why would I need to do this in one env, and not another,
given that the DB GRANTs are there.
Is there a particular app server setting that wil block execution of PL/SL procedures from the URL?
My guess is, there is some difference in configuration settings for the app server, somewhere in the httpd.conf chain.
Since I do not have access to those files, I cannot do a diff myself, as I would have if I the issue was on my machine.
I am in a situation where I can suggest what to do, but that's it. I agree, it's hard to troubleshoot in this situation.
I am being asked "what setting do I need to change?" without the benefit of access to what is there,so I am doing the best I can, without diverting from my work for a deep-dive refresher session on httpd.conf settings.
So, if anyone is aware of some setting that would block execution of a PL/SQL proc from the URL, please let me know,
and of course, if adding a proc to www_flow_epg_include_mod_local works, I'll be happy. Just still curious.
Thank you - K

How to call a procedure from url

hello,
I'd like to call a procedure from the url. 
I've tryed several ways to call that procedure, but none of it worked. 
so can someone please tell me the correct syntax of such a call? 
thanks in advance.

Hi ,
I have implemented this in one of my apps in the following way:
- Created a database procedure (called download_file that accepts a parameter). This procedure opens a document stored in the database.
- In a report region, in the Column Link attributes, I set the Link Text to "Download", set Target to "URL" and set URL to "#OWNER#.download_file?p_file=#MYFIELD#"
Hope this helps.

Calling the procedure from URL is not working

Hi Experts,
We are in the process of 11i to R12 upgrade of oracle EBS system.
In 11i they have done some personalization in the form which will trigger a URL and a notfication will open in the browser.
11i url
HTTPS://abc.xyz.t.COM:8070/PLS/abc/XXM_PO_NOTIFICATION_PREVIEW.SHOW?P_PO_HEADER_ID=1711&p_type=PO
r12 url
HTTPS://abcr12.xyz.t.COM:8070/PLS/abcr12/XXM_PO_NOTIFICATION_PREVIEW.SHOW?P_PO_HEADER_ID=1711&p_type=PO
The URL is calling the function XXM_PO_NOTIFICATION_PREVIEW.SHOW by passing the parameters and it is working fine in 11i.
In r12 it is constructing the correct URL but when the page opens it is saying page not found.
My question is when we pass call the package in browser URL..does it executes?
We have put some debug message in the package but it is not getting pritntig.
Many Thanks
Bharat

Page not found (404) is a generic error from the web server. It simply says something went wrong when it serviced that URL from the browser - not what exactly went wrong.
You need to look in the error log of the Apache server for the details.
Assuming a standard OHS (Oracle HTTP Server) install. The URL contains a DAD (Database Access Descriptor) - in your case it is abcr12. This DAD will be defined in the Apache config file called dads.conf in the mod_plsql directory.
Part of the DAD definition will be an Oracle username, password, and Oracle connection string (typically TNSFormat).
The error you see on the browser side is often due to this DAD connection and authentication details failing. E.g. Oracle schema is locked. Oracle password is wrong. TNS connection string requests a non-existing service from the Oracle Listener. Etc.
But it would make sense to first confirm that this is indeed a connectivity error, via the Apache error log.

How to get data from URL in a PL/SQL procedure

Hi! 
 
I want to pass values in APEX from a report with a link to a PL/SQL procedure through URL.
How can I make this? 
 
For example: 
 
I have a report: 
 
select 
 id, 
 name, 
 akt, 
 case 
 when akt is NULL then '< a href="f?p=&APP_ID.:27:&SESSION.:START_PROCESS" name="test_link" >set< /a >' 
 end choice 
from 
 USERS; 
 
I want to pass the value "id" in the link ( named "test_link" ) . And want to use this value in a process like this: 
 
DECLARE 
 v_user_id NUMBER(10); 
BEGIN 
 --I want to read this value from the url 
 if :REQUEST='START_PROCESS' then 
 v_user_id := ????; 
 
 ... 
 end if; 
END; 
 
 
Thanks! 
Marton

Hi,
1- Create a hidden item P27_USER_ID on page 27
2- Change your code :
SELECT ID, NAME, akt,
 CASE
 WHEN akt IS NULL
 THEN '< a href="f?p=&APP_ID.:27:&SESSION.:START_PROCESS:NO::P27_USER_ID:'
 || ID
 || '" name="test_link" >set< /a >'
 -- refer to f?p=App:Page:Session:Request:Debug:ClearCache:itemNames:itemValues:PrinterFriendly
 END choice
FROM users;
 And then
DECLARE
 v_user_id NUMBER (10);
BEGIN
 --I want to read this value from the url
 IF :request = 'START_PROCESS'
 THEN
 v_user_id := :p27_user_id;
 --your code
 END IF;
END;Hope this helps,
Grégory

Calling a stored procedure from a url

I am needing to call a stored procedure from a url string (or
anchor) understand that from training to be as follows:
http://host:port/pls/dad/package.procedure?query_string
With that in mind, I am getting an error as follows:
Not Found
The requested URL /pls/portal30/at_hrfm.checkshow.showcheck was
not found on this server.
Here is a sample of my url
http://servername:port/pls/portal30/at_hrfm.checkshow.showcheck
I can see servername:port/pls/portal30, it is just the
procedure I am having a problem with.
Here is a sample of my source code that is created under the
at_hrfm schema (I also tried under portal30 schema).
package body checkshow as
procedure showcheck as
begin
htp.htmlOpen;
htp.headOpen;
htp.title('My Check');
htp.comment ('This should be your Check');
htp.bodyOpen;
htp.header (1,'Check');
htp.print ('checkdate');
htp.bodyClose;
htp.headClose;
htp.htmlClose;
end;
end;

I think I figured this out. I don't think the grant to ANONYMOUS is going to work with production XE and the online documentation is in need of an update. It appears that production XE has been locked down and you will need to specify the name of each stored procedure you wish to allow to be executed by adding it to the WWV_FLOW_EPG_INCLUDE_MOD_LOCAL function. This is spelled out in more technical detail here: http://download.oracle.com/docs/cd/B25329_01/doc/appdev.102/b25309/adm_wrkspc.htm#BEJCGJFJ
Another alternative that would work involves creating a separate DAD. Using the DAD approach with my schema made all of my stored procedures callable from a web browser, so I rejected this approach. To make this usable (secure) I would have needed to create and maintain a separate database user for the DAD and then only granted it execute for the stored procedures I wanted to be callable from a URL.
Finally I read about using an on-demand procedure and having it invoke the desired stored procedure. While I didn't try this out, it sounds like another good approach because it maintains session security. If it can be used to return an image I do not know.
- Jim

URGENT ! JDEV 10.1.2 Problem with data control generated from session bean

I got a problem with data control generated from session bean which return a collection of data transfer object.
The dto's seem to be correct. The session bean load correctly the data into and the object's are plenty of data. Using the console to display the dto content is ok.
When generating a data control from this session bean and associate the dto included in the collection only the first object level and one-to-one dto object are correctly setted in the data control. Object that represent collection into the dto (one-to-many foreign key) are setted as collection with an iterator but the structure of the object is not setted. I don't know how to associate this second level of collection with the dto bean class to obtain the attributes definition.
I created a case with hr schema like the hrApp demo application in the tutorial with departments and employees table. I got the same problem.
Is it a bug ?
It exists a workaround to force the data control to understand the collection data structure ?
Help is welcome ! this is urgent !!!

we found the problem by assigning the child dto bean class to the node representing the iterator in the xml file corresponding to the master dto.

Passing parameter from url to procedure

i used to pass parameters from url to procedure like
host:port/dads/schema.procedure(para_1, para_2, ...)
for example
http://localhost:7777/pls/login('UK',1,0)
they have been working perfectly before, when i had 8i and webdb.
but now i'm running 10g, and browser returns error page 400 when i click the above links.
i know i can do
host:port/dads/schema.procedure?para_1=value1&para2=value2...
for example
http://localhost:7777/pls/login?language=UK&section=1&timezone=0
and this is what have been suggested in documentation of 9i and 10g
however i have quite a few webpages written in the former syntax and they used to work with 8i and 9i.
i don't want to change all the links in web pages, i prefer to stick with old style.
any one has any idea? is there a switch i should take care of? i checked apache conf files (httpd, mod_plsql, dads) but didn't get it.
ps for 10g companion, i installed http server (apache) only, no html db.
another question is
with brackets() in url, strings are to be quoted by ' ', but with question mark (?), single quote ' ' must not be used, is that what it has to be?
Thanks a lot

anyone have been using this?
http://host:port/dads/schema.procedure(para1,para2,..)

Call stored procedure from pre-session in workflow

Hi Friends How we can call a stored procedure from pre-session in session property, The procedure is presented under one package. i used follwing way call <schema_name>.<package_name>.<procedure_name> but its not calling that procedure. could you anybody help me with this?

Hi Friends How we can call a stored procedure from pre-session in session property, The procedure is presented under one package. i used follwing way call <schema_name>.<package_name>.<procedure_name> but its not calling the session. could you anybody help me with this?

Why are App Tabs session-controlled?

Firefox claims that it is creating a more secure browser. Wishful thinking, but quite false. The fact that App Tabs are included in session control is a major design flaw in Firefox. Because cookies are stored with app tabs, you have actually made Firefox much ''less'' secure. Fortunately, I have one possible solution. Mozilla is currently reviewing the add-on called App Tab Initializer. I'd rather you integrate it directly into Firefox. You can add the procedure undertaken by clicking the "Grab Current App Tabs" button in the add-on's options as the first step in Firefox's standard shutdown procedure. Then "Clear all history" in Firefox's own options should be the default, and it should be the second step. When you open Firefox again, Firefox should launch App Tabs according to the URLs given in the first step above. Your favorite examples to use are Gmail and Facebook, so those sites should be the ones you use to test both the problem and the solution. Thanks!

I have no such extensions. I learned of this option on lifehacker, which lists it as an option in Firefox, not from an add-on.
It's in their power-users' guide to firefox, here:
http://lifehacker.com/5867444/the-always-up+to+date-power-users-guide-to-firefox
I first used the option in Firefox 8 and it worked with app tabs. It doesn't anymore in 9.

I need to use a reserved word as parameter name in proc called from URL

Let me preface this post by saying I already know this is terrible to attempt, but it's short term fix only.
Ok, so I have to create a procedure that will be called by a vendors application via a API that calls our URL to send data over. The terrible part is
that the API they have uses the parameter FROM=vendor_data A change is on the way so in the future the API won't use FROM as a paramter, so this isn't something I want to do, but it's a workaround.
So the nastiness is this..., I can create a procedure that'll compile when I enclose FROM in double quotes "FROM" as my input parameter
but if I try to call my procedure via URL (as their application will do) the procedure isn't working. I searched for someway to do an inline
replace of the FROM parameter to something else, but no luck. I'm open to all positive comments. I cannot go outside of Oracle
to do this, so I can't call a shell script and replace. Basically I need some way to use a reserved word as a parameter name, and then be able to call
that proc from a URL, or someway to change the FROM in the URL inline. Any help on this admittedly whacky situation would be appreciated much.
I tried ...\myproc?from=text
...\myproc?"from"=text
...\myproc?'from'=text
proc is simple test procedure
create or replace procedure myproc
("from" in varchar2 default 0)
is
v_from varchar2(30);
begin
v_from:="FROM";
insert into test(col1) values(v_from);
end;
**** Update
I didn't get any more replies but came to a solution that I thought I'd post. It's much better, more elegant and maybe can help others.
So instead of using FROM as the parameter name I did some research and decided I can use flexible parameters. Basically you end up having
2 input parameters for a procedure, one holds a parameter name the other holds the parameter value. They get loaded into arrays
and you access the values with regular name_array(1), value_array(1), etc. ?v=parameter&v2=value
Once I figued I could use flexible parameter it took me tons of research to find out the actual syntax. I'll post some examples for others
later, but was suprised with the lack of resources consideriing how "flexible" they are.
Thanks again for the replies. Cheers.
Edited by: Mitz on Jul 29, 2009 11:37 PM

Scott,
Thanks for the reply. I'm not familiar with the wwv_flow_epg_include_mod_local, however I know that the
myproc is available via URL. I passed the my procedure name(myproc) on to the dba a while back to make it "accessible" so, I'm assuming that he
added it to this the www_flow_epg_mod_local (assuming this has something to do with access control).
If I modify myproc procedure and remove "FROM" as the input variable, and replace with say,
IN_FROM I can then call the procedure via the URL ./myproc?in_from=test without any problems.
I'm pretty confident that it's the "FROM" that is the hurdle and not a security or setup issue. The proc is fine to call from the URL until I got the curveball that the only available parameter was FROM. How the URL should be when inputing to that parameter?
Edited by: Mitz on Jul 25, 2009 7:36 PM
Edited by: Mitz on Jul 25, 2009 9:16 PM

Session id in BSP Url

Hi
I am creating a new iView of type BSP. On executing/previewing the iView the url is generated similar to:
http://<hostname>:<port>//sap(bD1lbiZjPTEwMCZkPW1pbiZpPTEmcz1TSUQlM2FBTk9OJTNhZHYxZDIxX0QyMV8yMSUzYU5pOXBPcGVTbE9HTVk0ZWdfcU1jUnVkYU04MU5WUUdCTDhrai10cGMtQVRU)/bc/bsp/sap/<application>/<start page>.htm
Although the BSP url is
http://<hostname>:<port>//sap
(bD1lbiZjPTEwMCZkPW1pbg==)/bc/bsp/sap/<application>/<start page>.htm
So the session parameters generated in the two URLs is different and the latter one works fine but the earlier one gives some issue when trying to save etc and does not work as expected.
I analysed the session parameters in the URLs and found that the former URL:
(l)anguage en
(c)lient 100
(d)omainRelax min
(i)info 1
(s)ession-id SID:ANON:dv1d21_D21_21:Ni9pOpeSlOGMY4eg_qMcRudaM81NVQGBL8kj-tpc-ATT
and the latter:
(l)anguage en
(c)lient 100
(d)omainRelax min
Is there any way this parameter be controlled from portal end so that I am able to get the BSP url (latter).
Appreciate any pointers.
Thanks,
Priyanka

Hi, it is not possible to diasable the url mangling you mentioned. You can call the static method
cl_o2_helper=>generate_url_for_page to get an url for a specific page.
Best regards,
Stefan

Session control via terminal services

I have an application running like a dream using JSP and server side session control. One paricular user has an environment where all PCs are linux based and running a terminal service from a Microsoft SBS server.
These PCs are unable to maintain session when connection to the site.
Has anywone hit this problem before, is the any setting in the Microsoft to help this?
Thanks for your help

I have checked that cookies are enabled. I can
implement URL rewiting but I was hoping for a simple
solution without needing to change the software. As
all other users are not having a problem.Maintaining a session involves passing an identifier between the client and the server. The identifier can be maintained on the client as a cookie, or the web component can include the identifier in every URL that is returned to the client. So clearly for whatever reason this is not happening. You need to either fix your application so URL rewriting is supported or find out why cookies are not working properly for these clients.
I am not skilled in ternminal services and was hoping
there was some configuration that coulod be tweeked.Try a Microsoft forum

Call a pl/sql stored procedure from a report link

Hello everyone:
I have a report with a link in a column, which takes you to another page and passes values to that page, but also need the link, run a stored procedure before going to the other page.
In the Forum I found cases similar to this, but none of the examples is clear to me how I do this. It seems that the target of the link should be URL, and also I have to call the stored procedure with a javascript function.
My questions are:
- Is this the best method to make what I need?
- How should be the syntax of the link that takes me to another page and run the "stored procedure"
- How and where I put the function "javascript" to run the "stored procedure"
BDD: Oracle 11 g
Apex version 4.1
Best regards
Gerard

Hi,
Change the link to call an apex.submit process. (javascript).
Edit:
I've set up a basic example.
Region 1 (just so you can see the value getting set):
select :P27_HIDDEN item_Value
from dual
Region 2:
select rownum id, dbms_random.string('U', 12) sss
from dual
connect by level <= 20
item attributes for ID:
Target: URL
URL: javascript:apex.submit({request:'NAVIGATE', set:{'P27_HIDDEN':#ID#}});
(P27_HIDDEN is just a hidden item i created)
http://apex.oracle.com/pls/apex/f?p=54920:27
Edit2:
In your case, then you can just have a page process based on conditions request = expression1, expression1: NAVIGATE..... then a page branch to go to the desired page, also with the same conditions
Edit3:
Im not sure what examples you are referring to , as you didn't supply any links; but you mention calling the stored procedure from javascript, so would likely involve some AJAX, but imo not necessary.

Performance differce calling Procedure from sqlplus and Java

Hi ,
I have one procedure which is called from java application and its called only once from java and the entire process is running from procedure itself.Once its called there is no dependency from java to PL/SQL.Its taking long time from java.But if I execute the same procedure from SQL plus then its running in seconds.Also only one session is running in entire database.
My Oracle version 11g.
Please guide me if you get some thing based on below session event.
This is the session status for running from SQL plus
SID     EVENT                    TOTAL_WAITS          TOTAL_TIMEOUTS     TIME_WAITED     WAIT_CLASS
2191     SQL*Net message from client     954                              0                    1319633          Idle
2191     direct path read                    860                              0                    702               User I/O
2191     db file sequential read               2605                         0                    550               User I/O
2191     SQL*Net break/reset to client     24                              0                    460               Application
2191     SQL*Net more data from client     3                              0                    159               Network
2191     direct path write temp               214                              0                    74               User I/O
2191     direct path read temp               314                              0                    67               User I/O
2191     db file scattered read               78                              0                    42               User I/O
2191     db file parallel read               71                              0                    21               User I/O
2191     log file sync                         36                              0                    12               Commit
2191     SQL*Net message to client          955                              0                    0               Network
2191     Disk file operations I/O          8                              0                    0               User I/O
2191     events in waitclass Other          15                              7                    0               Other
This is the session status for running from Java
SID     EVENT     TOTAL_WAITS     TIME_WAITED     WAIT_CLASS
1718     SQL*Net message from client     21208     7046039     Idle
1718     direct path read     2742     2327     User I/O
1718     log file sync     3748     1121     Commit
1718     db file sequential read     1533     1082     User I/O
1718     enq: TX - row lock contention     6     423     Application
1718     buffer busy waits     1     100     Concurrency
1718     log buffer space     1     30     Configuration
1718     direct path write temp     92     21     User I/O
1718     direct path read temp     138     16     User I/O
1718     log file switch (private strand flush incomplete)     6     16     Configuration
1718     SQL*Net message to client     21209     2     Network
1718     db file scattered read     2     1     User I/O
1718     SQL*Net more data from client     17     0     Network
1718     Disk file operations I/O     11     0     User I/O
1718     SQL*Net more data to client     1     0     Network
1718     events in waitclass Other     15     0     Other
Sorry I am not able to paste in proper alignment for my plain text.

Hi,
you need to find which SQL is running slower, using some tools as dbms_profiler, dbms_hprof, ASH, extended SQL trace and real-time SQL monitor (caution: some of the tools may require Diagnostic Pack License).
Then you need to pinpoint difference in the plans and understand its origin -- post plans here if you need help with that (use tags to preserve formatting).
Best regards,
Nikolay

Session controlled procedure from url

Similar Messages

Maybe you are looking for