Oracle APEX 24.1.6 | Oracle DB 19c
Hi, I have a button that triggers a dynamic action which calls an action of type “Execute Server-side Code”. The code performs some SQL DML statements (UPDATE, INSERT). It has an OUT parameter that I am binding to a page item.
I then use the Page Item to reload the same page (it is the PK value). I do so with a branch with a server-side condition that is specific to this button.
Here are some screenshots to elaborate on my explanation (marking stuff out that could be sensitive):
In any case, the “p_id_new" is the OUT parameter of the “renew” procedure. My page item, P2_NUM_RENEWED, has Application Level session state protection enabled, and, if possible, I'd like to keep this (I do notice that if I set it as unrestricted no error occurs).
The error I am getting is:
Ajax call returned server error ORA-20987: APEX - Attempt to save item P2_NUM_RENEWED in session state during show processing. Item protection level indicates:
Item may be set when accompanied by an "application-level bookmark" checksum.
No checksum was passed in or the checksum passed in would be suitable for an item with protection level "(No checksum was provided)".
Note: End users get a different error message. - Contact your application administrator. for ajax_set_session_state.
If I turn on debug and look at the log, I get the same message (more or less). The crux of the problem seems to be that setting the value of P2_NUM_RENEWED during show processing is not working, because “no checksum was passed in…”.
I've tried various things, such as using the procedure apex_util.set_session_state immediately after my procedure call, using apex_page.get_url in the branch, and refactoring my procedure to a function so I could do this:
I could just change the item to unrestricted SSP, but I'd like to understand this better to improve my ability to keep apps secure. It would be good to have the Page Item restricted with a checksum at the application level, so, is there a way to accomplish what I'm doing with this being the case?
Thank you!