Skip to Main Content

APEX

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

SSO enabled app and authorization scheme failing

afret1Mar 27 2013 — edited Sep 20 2013
I'm using APEX 4.1.0.00.32 and have an SSO enabled application - using Oracle Access Manager. A user brings up 2 instances of the app and both have a different session id. Just a bit more background. The App has 5 tabs of which 2 are controlled by Authorization schemes using application variables. ie
<div class="jive-quote">
Authorization scheme: is_abc_dept
Authentication: Page is public
Page Access Protection: Unrestricted
Form Auto Complete: On
Browser Cache: Application Default
</div>

The problem happens when a user navigates to a DEPT tab in the one instance and then goes to
an ADMIN tab in the second instance. This brings up the following warning/error:

<div class="jive-quote">
Access denied by Page security check
Technical Info (only visible for developers)


is_internal_error: true
apex_error_code: APEX.AUTHORIZATION.ACCESS_DENIED
component.type: APEX_APPLICATION_AUTHORIZATION
component.id: 214836727466266386
component.name: is_abc_dept
error_backtrace:

----- PL/SQL Call Stack -----
object line object
handle number name
0x8a6b7328 676 package body APEX_040100.WWV_FLOW_ERROR
0x8a6b7328 1008 package body APEX_040100.WWV_FLOW_ERROR
0x94386648 455 package body APEX_040100.WWV_FLOW_AUTHORIZATION
0x92df96b0 7228 package body APEX_040100.WWV_FLOW
0x7c990650 247 procedure APEX_040100.F
0x827c18e0 33 anonymous block

Page not found.

Return to application.
</div>
The warning/error happens because my authorization scheme uses application items. An examiniation
of the session variables at this warning/error, show that my application
items are null. In the first browser instance the application items were set, but going to the
second instance and then back to the first, the values of the application items were wiped
out. Is this intended behaviour? Is there anything I can do to keep the items set between
browser instances?

Alex.
Comments
Locked Post
New comments cannot be posted to this locked post.
Post Details
Locked on Oct 18 2013
Added on Mar 27 2013
3 comments
898 views