../E12512-02.epub /> ../E12512-02.mobi />

Managing Environment Settings

Environment settings control Oracle Application Express configuration and apply to all workspaces within the current Oracle Application Express instance.

Topics in this section include:

See Also:

"Specifying a Provisioning Mode" to learn more about the Self Service section of the Instance Settings page

Managing a Runtime Environment

An Oracle Application Express runtime environment enables you to run production applications, but it does not provide a Web interface for administration. A runtime environment only includes the packages necessary to run your application, making it a more hardened environment.You administer the Oracle Application Express runtime environment using SQL*Plus and the APEX_INSTANCE_ADMIN API. To learn more, see "APEX_INSTANCE_ADMIN" in Oracle Application Express Application Builder User’s Guide.

To install an exported application into a runtime installation, you must:

  1. Export the workspace from the Application Express instance where the application was developed as described in "Exporting and Importing a Workspace".

  2. Use SQL*Plus to import your workspace in to the runtime environment:

    • Connect as APEX_030200, SYS, SYSTEM, or any schema to which the role APEX_ADMINISTRATOR_ROLE has been granted.

    • Run the workspace import file.

      If the workspace export file was created with a version of Oracle Application Express lower than 3.2, you must connect as APEX_030200.

  3. Export and then import your application using SQL*Plus in to the runtime environment. See "Exporting an Application and Related Files" in Oracle Application Express Application Builder User’s Guide.

Disabling PL/SQL Program Unit Editing for an Instance

By default, developers can change and compile PL/SQL source code when browsing database procedures, packages, and functions in Object Browser. As an Oracle Application Express administrator, you can control PL/SQL program unit editing for an entire instance by making a selection from Allow PL/SQL Program Unit Editing.

To disable PL/SQL program unit editing:

  1. Log in to Oracle Application Express Administration Services. See "Logging in to Oracle Application Express Administration Services".

  2. Click Manage Service.

  3. Under Manage Environment Settings, click Feature Configuration.

  4. Locate the Application Development section.

  5. For Allow PL/SQL Program Unit Editing, select No.

  6. Click Apply Changes.

See Also:

"Disabling PL/SQL Program Unit Editing for a Workspace" for information about disabling PL/SQL program unit editing for a specific workspace

Disabling the Creation of Demonstration Applications in a New Workspace

When an Oracle Application Express administrator creates a new workspace, Oracle Application Express automatically creates a demonstration application within the workspace.

To disable the creation of demonstration applications:

  1. Log in to Oracle Application Express Administration Services. See "Logging in to Oracle Application Express Administration Services".

  2. Click Manage Service.

  3. Under Manage Environment Settings, click Feature Configuration.

  4. Locate the Application Development section.

  5. For Create demonstration objects in new workspaces, select No.

  6. Click Apply Changes.

Configuring SQL Workshop

As an Oracle Application Express administrator, you can use the attributes under SQL Workshop to configure basic SQL Workshop behavior.

To configure SQL Workshop:

  1. Log in to Oracle Application Express Administration Services. See "Logging in to Oracle Application Express Administration Services".

  2. Click Manage Service.

  3. Under Manage Environment Settings, click Feature Configuration.

  4. Under SQL Workshop, enter the attributes described in Table 2-1.

    Table 2-1 SQL Workshop Attributes

    Attribute Description

    SQL Commands Maximum Inactivity in minutes

    Identify the maximum amount of time a transactional command in the SQL Command Processor waits before timing out.

    SQL Scripts Maximum Script Output Size in bytes

    Identify the maximum amount of output a single SQL script can generate. SQL scripts are run from the SQL Workshop.

    SQL Scripts Maximum Workspace Output Size in bytes

    Identify the maximum amount of space all scripts within a workspace may consume. SQL script results are the output generated when running SQL scripts from the Script Editor or from the SQL Scripts home page.

    SQL Scripts Maximum Script Size in bytes

    Identify the maximum size of a SQL script used within the SQL Workshop.

    Enable Transactional SQL Commands

    Select Yes to enable transactional SQL commands for the entire Oracle Application Express instance. Enabling this feature permits SQL Command Processor users to issue multiple SQL commands within the same physical database transaction.

    When you select Yes, an Autocommit check box appears on the SQL Command Processor page. By default, this option is set to No.


  5. Click Apply Changes.

Enabling Database Monitoring

Setting Enable Database Monitoring to Yes enables monitoring withing SQL Workshop. Before you can access the Database Monitoring page, an Oracle Application Express administrator must enable database monitoring.

See Also:

"Monitoring the Database" in Oracle Application Express SQL Workshop and Utilities Guide

To enable database monitoring:

  1. Log in to Oracle Application Express Administration Services. See "Logging in to Oracle Application Express Administration Services".

  2. Click Manage Service.

  3. Under Manage Environment Settings, click Feature Configuration.

  4. Scroll down to Monitoring.

  5. For Enable Database Monitoring, select Yes.

  6. Click Apply Changes.

Note:

Only users having a database user account that has been granted a DBA role can access the Database Monitor page.

Configuring Security Settings

Oracle Application Express administrators can configure security settings, such as turning off cookies used to populate the login form in Application Express, controlling access to accounts, and setting up password policies.

Topics in this section include:

Turning Off Cookies Used to Populate the Login Form for Application Express

Oracle Application Express administrators can control if a convenience cookie is sent to the user's computer whenever a developer or administrator logs in to a workspace from the Application Express Login page. By default, the Set Workspace Cookie option is set to Yes.

If selected, Oracle Application Express sends a persistent cookie that:

  • combines the last used workspace name and user name

  • has a lifetime of six months

  • is read to populate the Application Express Workspace Login form (but not the Oracle Application Express Administration Services Login form)

Note:

If your computer has received this cookie, you can physically remove it from its persistent location on disk using browser tools or system utilities. The cookie is named ORA_WWV_REMEMBER_UN. In older releases of Oracle Application Express, this cookie was named ORACLE_PLATFORM_REMEMBER_UN. It may exist for each Oracle Application Express service accessed having distinct hostname and path components.

To prevent a cookie from being sent to the user's computer when logging in:

  1. Log in to Oracle Application Express Administration Services. See "Logging in to Oracle Application Express Administration Services".

  2. Click Manage Service.

  3. Under Manage Environment Settings, click Security.

  4. Locate the Security section.

  5. For Set Workspace Cookie, select No.

  6. Click Apply Changes.

Disabling Access to Oracle Application Express Administration Services

Oracle Application Express administrators can restrict user access to Oracle Application Express Administration Services. This prevents any user from logging in to Oracle Application Express Administration Services.

To disable user access to Oracle Application ExpressAdministration Services:

  1. Log in to Oracle Application Express Administration Services. See "Logging in to Oracle Application Express Administration Services".

  2. Click Manage Service.

  3. Under Manage Environment Settings, click Security.

  4. Locate the Security section.

  5. For Disable Administrator Login, select Yes.

  6. Click Apply Changes.

Setting this value and logging out prevents anyone from logging in to Oracle Application Express Administration Services.

Enabling Administrator Login

To reverse this setting and enable administrator login:

  1. Connect in SQL*Plus and connect to the database where Oracle Application Express is installed as SYS, for example:

    • On Windows:

      SYSTEM_DRIVE:\ sqlplus /nolog
      connect sys as sysdba
      
    • On UNIX and Linux:

      $ sqlplus /nolog
      connect sys as sysdba
      

    When prompted enter the appropriate password.

  2. Run the following statement:

    ALTER SESSION SET CURRENT_SCHEMA = APEX_030200;
    
  3. Run the following statements:

    BEGIN
      APEX_INSTANCE_ADMIN.SET_PARAMETER('DISABLE_ADMIN_LOGIN', 'N');
      commit;
    END;
    /
    

Disabling Access to Oracle Application Express Internal Applications

The applications that constitute Oracle Application Express (such as Application Builder and SQL Workshop) exist within a workspace named Internal. To restrict user access to Internal applications, select Yes from Disable Workspace Login. Selecting Yes in production environments prevents all users from running applications (such as Application Builder and SQL Workshop) in the Internal workspace. Administrators who use this feature should also consider disabling user access to Oracle Application Express Administration Services.

To disable user access to the Internal workspace:

  1. Log in to Oracle Application Express Administration Services. See "Logging in to Oracle Application Express Administration Services".

  2. Click Manage Service.

  3. Under Manage Environment Settings, click Security.

  4. Locate the Security section.

  5. From Disable Workspace Login, select Yes.

    Selecting Yes prevents users from logging in to the Internal workspace.

  6. Click Apply Changes.

Disabling Public File Upload

Use the Allow Public File Upload attribute to control whether unauthenticated users can upload files in applications that provide file upload controls.

To control file upload:

  1. Log in to Oracle Application Express Administration Services. See "Logging in to Oracle Application Express Administration Services".

  2. Click Manage Service.

  3. Under Manage Environment Settings, click Security.

  4. Locate the Security section.

  5. From Allow Public File Upload, select one of the following:

    • Yes enables unauthenticated users to upload files in applications in the Internal workspace.

    • No prevents unauthenticated users from uploading files in applications in the Internal workspace.

  6. Click Apply Changes.

Restricting User Access by IP Address

Oracle Application Express administrators can restrict user access to an Oracle Application Express instance by creating a Runtime setting named RESTRICT_IP_RANGE.

To restrict user access by IP address:

  1. Log in to Oracle Application Express Administration Services. See "Logging in to Oracle Application Express Administration Services".

  2. Click Manage Service.

  3. Under Manage Environment Settings, click Security.

  4. Locate the Security section.

  5. For Disable Administrator Login, select No.

  6. In Restrict Access by IP Address, enter a comma-delimited list of IP addresses. Use an asterisk (*) to specify a wildcard.

    You can enter IP addresses from one to four levels. For example:

    141, 141.* ...
    192.128.23.1 ...
    

    Note:

    When using wildcards, do not include additional numeric values after wildcard characters. For example, 138.*.41.2.
  7. Click Apply Changes.

Requiring HTTPS

Secure Socktets Layer (SSL) is a protocol for managing the security of data transmitted on the Internet. For Web applications, SSL is implemented by using the HTTPS protocol. Oracle recommends that you run Oracle Application Express applications using SSL (HTTPS protocol) to prevent any sensitive data from being sent over an unencrypted (cleartext) communication channel.

You can configure both your Oracle Application Express instance and all related applications to require HTTPS by setting the Require HTTPS attribute to Yes on the Manage Service page.

Note:

If you set Require HTTPS to Yes, you will only be able to log in to an Oracle Application Express workspace or Oracle Application Express Administration Services over HTTPS.

To require HTTPS for an Oracle Application Express instance:

  1. Log in to Oracle Application Express Administration Services. See "Logging in to Oracle Application Express Administration Services".

  2. Click Manage Service.

  3. Under Manage Environment Settings, click Security.

  4. Locate the Security section.

  5. For Require HTTPS, select Yes.

  6. Click Apply Changes.

Reversing HTTPS Requirement

To reverse the Require HTTPS instance-level requirement:

  1. Connect in SQL*Plus or SQL Developer with the Application Express engine schema as the current schema, for example:

    • On Windows:

      SYSTEM_DRIVE:\ sqlplus /nolog
      connect sys as sysdba
      
    • On UNIX and Linux:

      $ sqlplus /nolog
      connect sys as sysdba
      

    When prompted enter the appropriate password.

  2. Run the following statement:

    ALTER SESSION SET CURRENT_SCHEMA = APEX_030200;
    
  3. Run the following statements:

    BEGIN
        APEX_INSTANCE_ADMIN.SET_PARAMETER('REQUIRE_HTTPS', 'N');
        commit;
    end;
    /
    

Configuring Session Timeout

Use the attributes under Session Timeout to reduce exposure to abandoned computers with an open Web browser at the application level.

To manage session settings for an Oracle Application Express instance:

  1. Log in to Oracle Application Express Administration Services. See "Logging in to Oracle Application Express Administration Services".

  2. Click Manage Service.

  3. Under Manage Environment Settings, click Security.

  4. Under Session Timeout For Application Express, specify the following attributes:

    • Maximum Session Length in Seconds - Enter a positive integer representing how many seconds a session can exist for Oracle Application Express applications (that is, Application Builder, SQL Workshop, and so on). Leave the value NULL to revert the value to the default of 28800 seconds (or 8 hours). This session duration may be superseded by the operation of the job that runs every eight hours which deletes sessions older than 24 hours.

    • Maximum Session Idle Time in Seconds - Enter a positive integer representing how many seconds a session may remain idle for Oracle Application Express applications (that is, Application Builder, SQL Workshop, and so on). Leave the value null to revert the value to the default of 1 hour (3600 seconds).

  5. Click Apply Changes.

Excluding Domains from Regions of Type URL and Web Services

It is possible to restrict regions of type URL and Web services for the entire Oracle Application Express instance. The Oracle Application Express administrator defines excluded domains and regions of type URL. If a Web reference or region of type URL contains an excluded domain, an error displays informing the user that it is restricted.

To exclude a domain from regions of type URL and Web services:

  1. Log in to Oracle Application Express Administration Services. See "Logging in to Oracle Application Express Administration Services".

  2. Click Manage Service.

  3. Under Manage Environment Settings, click Security.

  4. In Domain Must Not Contain, enter a colon-delimited list of excluded domains.

  5. Click Apply Changes.

Enabling Login Controls for All Workspaces

By default, no login controls are enabled across an Oracle Application Express instance. Oracle Application Express administrators can enable login controls for all accounts in all workspaces across an entire development instance. Account login controls include:

  • Require user account expiration and locking

  • Set up a maximum number of failed login attempts

  • Set the lifetime of a password before prompted for a new one

If the Oracle Application Express administrator does not enable login controls for an entire instance then each Workspace administrator can enable the following controls on a workspace-by-workspace basis. See "Enabling Login Controls for a Workspace".

Note that Account Login control affect applications that use the Application Express user account creation facilities and authentication against those accounts.

To enable login controls for all workspaces:

  1. Log in to Oracle Application Express Administration Services. See "Logging in to Oracle Application Express Administration Services".

  2. Click Manage Service.

  3. Under Manage Environment Settings, click Security.

  4. Scroll down to Account Login control.

  5. Under Account Login Control:

    1. Require User Account Expiration and Locking - Select Yes to enable this feature for all workspaces across an entire Oracle Application Express instance. This feature applies to end-user accounts created using the Application Express end-user account management interface.

      Select No to relinquish control to each Workspace administrator.

    2. Maximum Login Failures Allowed - Enter a number for the maximum number of consecutive unsuccessful authentication attempts allowed before a developer or administrator account is locked. If you do not specify a value in this field, the default value is 4.

      This setting applies to Application Express administrator and developer accounts. It does not apply to end user accounts.

      The value you enter is used as the default for the workspace-level Maximum Login Failures Allowed preference, if the Workspace administrator does not specify a value. That preference is used for end-user accounts within the respective workspace.

    3. Account Password Lifetime (days) - Enter a number for the maximum number of days a developer or administrator account password may be used before the account expires. If you do not specify a value in this field, a default value is 45 days.

      This setting applies to accounts used to access the Application Express administration and development environment only. It does not apply to end-user accounts used by applications developed in Application Express.

      The value you enter is used as the default workspace-level End User Account Lifetime preference, if the Workspace administrator specifies no value. That preference is used for end-user accounts within the respective workspace.

  6. Click Apply Changes.

Tip:

This feature applies only to accounts created using the Application Express user creation and management facilities. It provides additional authentication security for applications. See "Managing Application Express Users".

About Password Policies

Oracle Application Express administrators can enable password policies for:

  • All users across all workspaces (that is, Workspace administrators, developers, and end users).

    Oracle Application Express administrators can set up restrictions for all users, including password characters, lengths, words, and differences in consecutive passwords.

  • Users logging in to Oracle Application Express Administration Services

    Turning on the strong password requirement for Oracle Application Express adds another layer of security to prevent hackers from determining an administrator's password. When this option is selected, passwords must meet these requirements:

    • consist of at least six characters

    • contain at least one lowercase alphabetic character, one uppercase alphabetic character, one numeric digit, and one punctuation character

    • cannot include the username

    • cannot include the word Internal

    • cannot contain any words shown in the Must Not Contain Workspace Name field in this section

Configuring Password Policies

To configure password policies:

  1. Log in to Oracle Application Express Administration Services. See "Logging in to Oracle Application Express Administration Services".

  2. Click Manage Service.

  3. Under Manage Environment Settings, click Security.

  4. To set up a password policy for Workspace administrators, developers, and end users, scroll down to Workspace Password Policy and specify the attributes described in Table 2-2.

    Table 2-2 Workspace Password Policy Attributes

    Attribute Description

    Minimum Password Length

    Enter a number for the minimal character length for passwords.

    Minimum Password Differences

    Enter a positive integer or 0.

    When users change their password, the new password must differ from the old password by this number of characters. The old and new passwords are compared, character-by-character, for differences such that each difference in any position common to the old and new passwords counts toward the required minimum difference.

    Must Contain At Least One Alphabetic Character

    Select Yes to require that user passwords contain at least one alphabetic character. The Alphabetic Characters field lists the letters considered alphabetic characters.

    Must Contain At Least One Numeric Character

    Select Yes to require that user passwords contain at least one numeric character: 0,1,2,3,4,5,6,7,8, 9.

    Must Contain At Least One Punctuation Character

    Select Yes to require that user passwords contain at least one punctuation character. The Punctuation Characters field lists the symbols considered punctuation characters.

    Must Contain At Least One Upper Case Character

    Select Yes to require that user passwords contain at least one uppercase alphabetic character.

    Must Contain At Least One Lower Case Character

    Select Yes to require that passwords for users contain at least one lowercase alphabetic character.

    Must Not Contain Username

    Select Yes to prevent user passwords from containing the username, regardless of case.

    Must Not Contain Workspace Name.

    Select Yes to prevent user passwords from containing the workspace name, regardless of case.

    Must Not Contain

    Enter words, separated by colons, that may not be included in user passwords. These words may not appear in the password in any combination of uppercase or lowercase.

    This feature improves security by preventing the creation of some simple, easy-to-guess passwords based on words like hello, guest, welcome, and so on.

    Alphabetic Characters

    Enter new text or edit the existing text. This is the set of characters used in password validations involving alphabetic characters.

    Punctuation Characters

    Enter new text or edit the existing text. This is the set of characters used in password validations involving punctuation characters.


    Next, set up a password policy for service administrators.

  5. Scroll down to the Service Administrator Password Policy and specify one of the following:

    1. Use policy specified in Workspace Password Policy - Applies the password rules specified above in Workspace Password Policy to service administrator passwords.

    2. Use default strong password policy - Applies the default strong password policy to service administrator passwords. To learn more, see item Help.

  6. Click Apply Changes.

Restricting Access to Oracle Application Express by Database Access Descriptor (DAD)

mod_plsql and the embedded PL/SQL gateway support a directive which enables you to name a PL/SQL function which will be called for each HTTP request. You can use this functionality to restrict the procedures that can be invoked through the embedded PL/SQL gateway or mod_plsql. The function returns TRUE if the named procedure in the current request is allowed and FALSE if it is not allowed. You can use this function to enforce access restrictions for Oracle Application Express on a per-database access descriptor (DAD) basis.

Oracle Application Express ships with a request validation function named wwv_flow_epg_include_modules.authorize. This function specifies access restrictions appropriate for the standard DAD configured for Oracle Application Express.

During installation, the installer also creates a PL/SQL function in the Oracle Application Express product schema (APEX_030200). You can change and recompile this function to restrict access. The source code for this function is not wrapped and can be found in the Oracle Application Express product core directory in the file named wwv_flow_epg_include_local.sql. The source code is as follows

CREATE OR REPLACE FUNCTION
wwv_flow_epg_include_mod_local(
    PROCEDURE_NAME IN VARCHAR2)
RETURN BOOLEAN
IS  
BEGIN  
    RETURN FALSE; -- remove this statement when  
you add procedure names to the "IN" list
    IF UPPER(procedure_name) IN (
          '') THEN  
        RETURN TRUE;  
    ELSE  
        RETURN FALSE;  
    END IF;  
END wwv_flow_epg_include_mod_local;
/

To add names of procedures that should be allowed:

  1. Remove or comment out the RETURN FALSE statement that immediately follows the BEGIN statement:

    ...
    BEGIN  
        RETURN FALSE; -- remove this statement when 
    you add procedure names to the "IN" list
    ...
    
  2. Add names to the clause representing procedure names that should be allowed to be invoked in HTTP requests. For example to allow procedures PROC1 and PROC2 the IN list you would write IN ('PROC1', 'PROC2').

After changing the source code of this function, alter the Oracle Application Express product schema (APEX_030200) and compile the function in that schema.

To alter the product schema, APEX_030200

  1. Log in to SQL Command Line (SQL*Plus) as SYS.

  2. Alter the product schema (APEX_030200) by entering the following command:

    ALTER SESSION SET CURRENT_SCHEMA APEX_030200; 
    
  3. Compile the function wwv_flow_epg_include_local.sql.

The wwv_flow_epg_include_mod_local function is called by Oracle Application Express's request validation function which itself is called by the embedded PL/SQL gateway or mod_plsql. The Oracle Application Express function first evaluates the request and based on the procedure name, approves it, rejects it, or passes it to the local function, wwv_flow_epg_include_mod_local, which can evaluate the request using its own rules.

When you create new Database Access Descriptors for use with Oracle Application Express, the request validation function directive should be specified. Specifically, the function wwv_flow_epg_include_modules.authorize should be named in the directive PlsqlRequestValidationFunction in the Database Access Descriptor entry in dads.conf.

If you have no additional restrictions beyond those implemented in the wwv_flow_epg_include_modules.authorize function, there is no need to take any action with respect to the source code for the wwv_flow_epg_include_mod_local function.

The PL/SQL Request Validation Function directive is only available in Oracle Application Server 10g and Oracle HTTP Server 11g or later, as well as the embedded PL/SQL gateway in Oracle Database 11g or later. This directive is not available in Oracle HTTP Server Release 9.0.3.

Configuring Email Settings

To enable Oracle Application Express to send mail, an Oracle Application Express administrator must configure email settings

Additionally, if you are running Oracle Application Express with Oracle Database 11g release 1 (11.1), you need to enable outbound mail. In Oracle Database 11g release 1 (11.1), the ability to interact with network services is disabled by default. For more information, see "Enabling Network Services in Oracle Database 11g" for your configuration scenario in Oracle Application Express Installation Guide.

Tip:

You can configure Oracle Application Express to automatically email users their login credentials when a new workspace request has been approved. To learn more, see "Specifying a Provisioning Mode".

Topics in this section include:

See Also:

"Sending Email from an Application" in Oracle Application Express Application Builder User’s Guide

Configuring Email in a Full Development Environment

To configure Oracle Application Express to send mail in a full development environment:

  1. Log in to Oracle Application Express Administration Services. See "Logging in to Oracle Application Express Administration Services".

  2. Click Manage Service.

  3. Under Manage Environment Settings, click Instance Settings.

  4. Under Email, enter the following:

    1. SMTP Host Address - Defines the server address of the SMTP server. By default on installation, this is set to localhost. If you are using another server as an SMTP relay, change this parameter to that server's address.

    2. SMTP Host Port - Defines the port the SMTP server listens to for mail requests. The default setting is 25.

    3. Administration Email Address - Defines the "from" address for administrative tasks that generate email, such as approving a provision request or resetting a password.

  5. Click Apply Changes.

Configuring Email in a Runtime Environment

To configure Oracle Application Express to send mail in a runtime environment:

  1. Start SQL*Plus and connect to the database where Oracle Application Express is installed as SYS. For example:

    • On Windows:

      SYSTEM_DRIVE:\ sqlplus /nolog
      connect sys as sysdba
      
    • On UNIX and Linux:

      $ sqlplus /nolog
      connect sys as sysdba
      

    When prompted enter the appropriate password.

  2. Run the following statement:

    ALTER SESSION SET CURRENT_SCHEMA = APEX_030200
    
  3. Run the following statement:

    BEGIN
       APEX_INSTANCE_ADMIN.GET_PARAMETER(PARAMETER_NAME, PARAMETER_VALUE);
    END;
    

    For a description of email parameters, see Table 2-3.

    Table 2-3 Email Parameters

    Parameter Name Description

    SMTP_FROM

    Defines the "from" address for administrative tasks that generate email, such as approving a provision request or resetting a password.

    Enter a valid email address, for example:

    someone@somewhere.com

    SMTP_HOST_ADDRESS

    Defines the server address of the SMTP server. If you are using another server as an SMTP relay, change this parameter to that server's address.

    Default setting:

    localhost
    

    SMTP_HOST_PORT

    Defines the port the SMTP server listens to for mail requests.

    Default setting:

    25
    

Determining Email Settings in a Runtime Environment

To determine email settings in runtime environment:

  1. Start SQL*Plus and connect to the database where Oracle Application Express is installed as SYS. For example:

    • On Windows:

      SYSTEM_DRIVE:\ sqlplus /nolog
      connect sys as sysdba
      
    • On UNIX and Linux:

      $ sqlplus /nolog
      connect sys as sysdba
      

    When prompted enter the appropriate password.

  2. Run the following statement:

    ALTER SESSION SET CURRENT_SCHEMA = APEX_030200
    
  3. Run the following statement:

    SELECT 
    APEX_INSTANCE_ADMIN.GET_PARAMETER(PARAMETER_NAME)
    FROM DUAL;
    

    For a description of email parameters, see Table 2-3.

Configuring Wallet Information

Secure Sockets Layer (SSL) is an industry standard protocol that uses RSA public key cryptography in conjunction with symmetric key cryptography to provide authentication, encryption, and data integrity. When SSL is enabled, https displays in the URL.

If you call a SSL-enabled URL (for example, by invoking a Web service), or create a region of type URL that is SSL-enabled, you must create a wallet. A wallet is a password-protected container that stores authentication and signing credentials (including private keys, certificates, and trusted certificates) needed by SSL.

Topics in this section include:

Creating a Wallet

To create a wallet:

  1. The database administrator must create a wallet on the Oracle Application Express database instance. See "Using Oracle Wallet Manager" in Oracle Database Advanced Security Administrator's Guide.

  2. The Oracle Application Express administrator configures the Wallet section of the Instance Settings page to specify the file system path to the wallet and the wallet password (if required).

See Also:

"Working with SSL Enabled Web Services" in Oracle Application Express Application Builder User’s Guide and "Using Oracle Wallet Manager" in Oracle Database Advanced Security Administrator's Guide

Configuring a Wallet in a Full Development Environment

To specify wallet settings in a full development environment:

  1. Log in to Oracle Application Express Administration Services. See "Logging in to Oracle Application Express Administration Services".

  2. Click Manage Service.

  3. Under Manage Environment Settings, click Instance Settings.

  4. Scroll down to Wallet.

  5. In Wallet, enter the path on the file system where the wallet is located using the following format:

    file:directory-path
    
  6. If a password is required to open the wallet:

    1. Enter a password in the Wallet Password field.

    2. Select Check to confirm that you wish to change the wallet password.

  7. Click Apply Changes.

Configuring a Wallet in a Runtime Environment

To specify wallet settings in a runtime environment:

  1. Start SQL*Plus and connect to the database where Oracle Application Express is installed as SYS. For example:

    • On Windows:

      SYSTEM_DRIVE:\ sqlplus /nolog
      connect sys as sysdba
      
    • On UNIX and Linux:

      $ sqlplus /nolog
      connect sys as sysdba
      

    When prompted enter the appropriate password.

  2. Run the following statement:

    ALTER SESSION SET CURRENT_SCHEMA = APEX_030200
    
  3. Run the following statement:

    BEGIN 
        APEX_INSTANCE_ADMIN.SET_PARAMETER(PARAMETER_NAME, PARAMETER_VALUE);
    END;
    

    For a description of wallet parameters, see Table 2-4.

    Table 2-4 Wallet Parameters

    Parameter Name Description

    WALLET_PATH

    The path to the wallet on the file system, for example:

    file:/home/<username>/wallets
    

    WALLET_PWD

    The password associated with the wallet.


Determining Wallet Settings in a Runtime Environment

To determine wallet settings in a runtime environment:

  1. Start SQL*Plus and connect to the database where Oracle Application Express is installed as SYS. For example:

    • On Windows:

      SYSTEM_DRIVE:\ sqlplus /nolog
      connect sys as sysdba
      
    • On UNIX and Linux:

      $ sqlplus /nolog
      connect sys as sysdba
      

    When prompted enter the appropriate password.

  2. Run the following statement:

    ALTER SESSION SET CURRENT_SCHEMA = APEX_030200
    
  3. Run the following statement:

    SELECT 
    APEX_INSTANCE_ADMIN.GET_PARAMETER(PARAMETER_NAME) 
    FROM DUAL;
    

    For a description of wallet parameters, see Table 2-4.

Configuring Report Printing

Oracle Application Express provides several features so that end users can download and print reports in various formats, including PDF. To set up this functionality, different users must configure the following printing settings:

  1. Site Level: Oracle Application Express service administrators must specify the level of functionality (Standard or Advanced) for an entire Oracle Application Express instance, as described in this section.

  2. Application Level: Workspace administrators and developers can define Report Queries and Report Layouts. Report Queries and Report Layouts are stored under Shared Components and are not tied to a specific page.

  3. Page/Region Level: Developers can edit the Report regions on specific pages to enable printing. This, in turn, enables end users to print regions as reports in various formats. See "Configuring Classic Report Region Print Attributes" in Oracle Application Express Application Builder User’s Guide.

Tip:

If you are running Oracle Application Express with Oracle Database 11g Release 1 (11.1), you must enable network services to use report printing. See "Enabling Network Services in Oracle Database 11g" for your configuration scenario in Oracle Application Express Installation Guide.

Topics in this section include:

Configuring Report Printing in a Full Development Environment

To configure the printing of reports in a full development environment:

  1. Log in to Oracle Application Express Administration Services. See "Logging in to Oracle Application Express Administration Services".

  2. Click Manage Service.

  3. Under Manage Environment Settings, click Instance Settings.

  4. Scroll down to Report Printing:

  5. For Oracle BI Publisher, select one of the following:

    • Standard Support - This is the default setting. Standard Support enables you to print report regions and report queries using either the built-in templates provided with Oracle Application Express or other XSL-FO compatible formats you provide. This setting does not support RTF (rich text format).

      Standard Support provides declarative formatting of report regions and report queries with basic control over page attributes, including orientation, size, column heading formats, page header, and page footer.

    • Advanced Support - Requires a valid license of Oracle BI Publisher (also known as Oracle XML Publisher). Advanced Support provides you with all the capabilities of the Standard setting plus the ability to define RTF-based report layouts developed using the BI Publisher Word Template Builder.

      See Also:

      PDF Printing in Application Express 3.1 to learn more about installing and configuring Oracle BI Publisher. Go to:
      http://www.oracle.com/technology/products/database/application_express/html/configure_printing.html
      
  6. For Print Server Protocol, select the protocol that the print server uses.

  7. For Print Server Host Address, specify the host address of the print server engine.

  8. For Print Server Port, define the port of the print server engine. By default, this is set to 8888 when the report server is installed.

  9. For Print Server Script, define the script that is the print server engine. The default setting is:

    /xmlpserver/convert
    
  10. Click Apply Changes.

Configuring Report Printing Settings in a Runtime Environment

To configure report printing settings in a runtime environment:

  1. Start SQL*Plus and connect to the database where Oracle Application Express is installed as SYS. For example:

    • On Windows:

      SYSTEM_DRIVE:\ sqlplus /nolog
      connect sys as sysdba
      
    • On UNIX and Linux:

      $ sqlplus /nolog
      connect sys as sysdba
      

    When prompted enter the appropriate password.

  2. Run the following statement:

    ALTER SESSION SET CURRENT_SCHEMA = APEX_030200
    
  3. Run the following statement:

    BEGIN
        APEX_INSTANCE_ADMIN.SET_PARAMETER(PARAMETER_NAME, PARAMETER_VALUE);
    END;
    

    For a description of available parameters, see Table 2-5.

    Table 2-5 Report Printing Parameters in Runtime Environment

    Parameter Name Description

    PRINT_BIB_LICENSED

    Specify either standard support or advanced support. Advanced support requires an Oracle BI Publisher license. Valid values include:

    • STANDARD

    • ADVANCED

    PRINT_SVR_PROTOCOL

    Valid values include:

    • http

    • https

    PRINT_SVR_HOST

    Specifies the host address of the print server converting engine, for example, localhost. Enter the appropriate host address if the print server is installed at another location.

    PRINT_SVR_PORT

    Defines the port of the print server engine, for example 8888. Value must be a positive integer.

    PRINT_SVR_SCRIPT

    Defines the script that is the print server engine, for example:

    /xmlpserver/convert
    

Determining Report Printing Settings in a Runtime Environment

To determine report printing settings in a runtime environment:

  1. Start SQL*Plus and connect to the database where Oracle Application Express is installed as SYS. For example:

    • On Windows:

      SYSTEM_DRIVE:\ sqlplus /nolog
      connect sys as sysdba
      
    • On UNIX and Linux:

      $ sqlplus /nolog
      connect sys as sysdba
      

    When prompted enter the appropriate password.

  2. Run the following statement:

    ALTER SESSION SET CURRENT_SCHEMA = APEX_030200
    
  3. Run the following statement:

    SELECT 
    APEX_INSTANCE_ADMIN.GET_PARAMETER(PARAMETER_NAME)
    FROM DUAL;
    

    For a description of available parameters, see Table 2-5.

Requiring a New Schema When Creating a Workspace

Oracle Application Express administrators can require a new schema when user's request a new workspace.

To require a new schema when creating a workspace:

  1. Log in to Oracle Application Express Administration Services. See "Logging in to Oracle Application Express Administration Services".

  2. Click Manage Service.

  3. Under Manage Environment Settings, click Instance Settings.

  4. Scroll down to Schema.

  5. From Require New Schema, select Yes or No to determine if a user requesting a workspace can select an existing schema or must request a new schema.

  6. Click Apply Changes.

Configuring Workspace Size Options for Requests

Oracle Application Express administrators can configure the workspace sizes available when users request:

  • a new workspace and schema

  • additional space for an existing workspace

To configure workspace size options:

  1. Log in to Oracle Application Express Administration Services. See "Logging in to Oracle Application Express Administration Services".

  2. Click Manage Service.

  3. Under Manage Environment Settings, click Instance Settings.

  4. Scroll down to New Workspace Request Size and Workspace Change Request Size, specify the appropriate information:

    • Size in Megabytes - Edit the default numbers to change the size options.

    • Display - Select Yes for all the size options you want to appear in the select list for workspace size.

    • Default - Select the default value to appear in the storage field for workspace and change requests.

  5. Click Apply Changes.

Managing Login and System Messages

Oracle Application Express administrators can communicate with all users in an Oracle Application Express instance by creating login and system messages. Typically, administrators use a login message in conjunction with a system message to communicate with all system users, such as regarding privacy notices or access restrictions.

Topics in this section include:

Managing a Login Message

A login message displays on the Oracle Application Express login page. Oracle Application Express administrators can create a login message using the Login Message section of the Messages page.

To create a login message:

  1. Log in to Oracle Application Express Administration Services. See "Logging in to Oracle Application Express Administration Services".

  2. Click Manage Service.

  3. Under Manage Environment Settings, click Messages.

  4. For Login Message, select Custom Message.

  5. In Message, enter a message. The message can contain any text and can optionally include HTML formatting.

  6. Click Apply Changes.

To disable a login message:

  1. Log in to Oracle Application Express Administration Services. See "Logging in to Oracle Application Express Administration Services".

  2. Click Manage Service.

  3. Under Manage Environment Settings, click Messages.

  4. For Login Message, select No Message.

  5. Click Apply Changes.

Managing a System Message

System messages display on the Workspace home page, Application Builder home page, Application home page, SQL Workshop home page, and the Oracle Application Express Utilities page.

Oracle Application Express administrators can create a system message using the System Message section of the Messages page.

Create a System Message

To create a system message:

  1. Log in to Oracle Application Express Administration Services. See "Logging in to Oracle Application Express Administration Services".

  2. Click Manage Service.

  3. Under Manage Environment Settings, click Messages.

  4. For System Message, select Custom Message.

  5. In Message, enter a message. The message can contain any text and can optionally include HTML formatting.

  6. Click Apply Changes.

Disable a System Message

To disable a system message:

  1. Log in to Oracle Application Express Administration Services. See "Logging in to Oracle Application Express Administration Services".

  2. Click Manage Service.

  3. Under Manage Environment Settings, click Messages.

  4. For System Message, select No Message.

  5. Click Apply Changes.