HOW DO I USE Page Level Authorization

 

Introduction
Using Page-Level Authorization in Oracle APEX allows you to control which users can access specific pages within your application based on defined rules or roles. This feature is essential for applications that serve different types of users, such as admins, managers, or standard users, and need to enforce access restrictions. By applying authorization schemes at the page level, you can ensure that sensitive data or functions are only visible to users with the appropriate privileges.

 

Page-Level Authorization in Oracle APEX is a method to control which users can access specific pages in your application. It is especially useful when different roles or user types need to see different functionality or content within the same application. By applying authorization schemes directly to pages, you ensure that only users with the proper access rights can view or interact with those pages.

To use Page-Level Authorization in Oracle APEX, first define an Authorization Scheme. Navigate to your application, then go to Shared Components > Authorization Schemes. Click Create, then choose From Scratch or From Template depending on your needs.

For example, to restrict access to users with the role "ADMIN", you might create a scheme with these settings:

• Name: Admin Only

• Scheme Type: PL/SQL Function Returning Boolean

• PL/SQL Code:

  RETURN :APP_USER IN (SELECT username FROM app_users WHERE user_role = 'ADMIN');
  

Alternatively, you can use a simpler condition like:

RETURN :APP_USER = 'ADMIN';

Once your authorization scheme is created, go to Page Designer and select the page you want to protect. In the Page Attributes, look for the Security section. Set the Authorization Scheme to the scheme you just created (e.g., “Admin Only”).

When a user attempts to access this page, Oracle APEX will evaluate the authorization scheme. If the result is TRUE, the page loads. If it returns FALSE, the user is redirected to the application's home page (or another configured page) with an access denied message.

You can also use authorization schemes at a more granular level—such as for regions, buttons, items, or processes—if you want to show or hide elements on a page rather than restrict the entire page.

To test your setup, run the application and sign in as a user with and without the required role. Try accessing the page directly through the browser’s URL bar to verify that the access restriction is working as expected.

Using Page-Level Authorization allows you to build secure, role-based access into your Oracle APEX applications. It ensures users only see the pages that are relevant to them and helps prevent unauthorized access to sensitive information or functionality.

 

Error Message

 

Conclusion
Implementing Page-Level Authorization in Oracle APEX strengthens your application’s security and supports a more tailored user experience. It helps protect restricted areas, prevents unauthorized access, and allows you to align content visibility with business roles. By combining dynamic authorization schemes with proper session and user management, you maintain control over who sees what—right where it matters most.