I want to create a 4 different levels of authorizations for users:
L1: Full access to edit entries and passwords
L2: Only read access to entries and passwords
L3: Read access to entries and no read access to passwords
L4: Edit entries and read to passwords
The following is what I have done:
- created database roles which give the specfic privileges
- created users and assigned the appropriate role
- On APEX, created the same users via Manage Users and Groups
- On APEX, created 4 different authorization schemes associated with each database role. For example:
Scheme Type: Exists SQL Query
SQL Query: select 1
from sys.dba_role_privs
where grantee = :app_user
and granted_role = 'RR_ROLE'
- On APEX, assigned each user with the appropriate authorization scheme in the access control list
The application authorization is not working based on role privileges...am I missing a step???