20.1 Understanding Administrator Security Best Practices

Learn about security best practices for Oracle Application Express administrators.

Note:

To ensure the security and performance of your development environment, some Administration Services functionality is not available in Oracle APEX instances running in Oracle Cloud.

This section references many settings in the Oracle Application Express Administration Services application.

• About Oracle Application Express Administrator Roles
  Oracle Application Express includes two different types of administrators: Workspace administrators and Instance administrators.
• Web Listener Security Considerations
  Review Oracle REST Data Services security considerations.
• Managing Instance Security
  Learn about security best practices when managing an Oracle Application Express instance.
• Configuring Instance Settings
  Security best practices when configuring an Oracle Application Express instance include determining whether to automate the creation workspaces., enabling and configuring email, configuring storage options, and creating wallets.
• About Configuring Workspace Purge Settings
  Save storage space and improve system performance by purging inactive workspaces.
• Understanding Workspace Management
  Instance administrators can define associations between workspaces and schemas. Administrators can manage developers and users at the workspace or instance-level and control user access to key components such App Builder, Team Development, and SQL Workshop, and PL/SQL editing.
• About Integrating with Oracle BI Publisher
  Oracle recommends that you employ Secure Sockets Layer (SSL) when integrating Oracle Application Express with Oracle BI Publisher. Once SSL (HTTPS protocol) is configured for your Oracle BI Publisher server, you must create a wallet and specify the HTTPS protocol for the Report Server in the internal administration Environment Settings.
• About the Advantages of the Application Express Runtime Environment
  An Oracle Application Express runtime environment enables you to run production applications, but does not provide a web interface for administration or direct development of these applications.
• Enabling Network Services in Oracle Database
  You must enable network services in Oracle Database to send outbound mail, use Web services, or use PDF report printing in Oracle APEX.

See Also:

"Understanding Developer Security Best Practices"