APEX_PUBLIC_USER

When a user is logged into an APEX application all database operations are performed by a database session connected as APEX_PUBLIC_USER as defined in the DAD setup file (dads.conf). This is true for all authentication schemes. The APEX_PUBLIC_USER user only have the CREATE SESSION privilege. Default the password for APEX_PUBLIC_USER is stored in clear text in the PlsqlDatabasePassword parameter in the DAD.

For added security the password can be obfuscated via the dadTool.pl utility. Check ORACLE_HOME\Apache\modplsql\conf\dadTool.README.

Windows example:

set ORACLE_HOME=D:\OracleDb10g
set PATH=%ORACLE_HOME%\Apache\modplsql\conf;%PATH%
set PATH=%ORACLE_HOME%\perl\5.6.1\bin\MSWin32-x86;%PATH%
set PATH=%ORACLE_HOME%\bin;%PATH%

cd %ORACLE_HOME%\Apache\modplsql\conf

perl dadTool.pl -o

If you use marvel.conf you need to temporary rename the file to dads.conf.

Additional information

• The APEX Installation Guide

Comments