Security Options in the Administration Services

In the APEX Administration Services, an administrator has a list of security options that should be configured on a production server before going live.

• Disable Administrator Login: This prevents any user from logging in to the Administration Services. This setting can be reversed by calling a couple of PL/SQL procedures
• Disable Workspace Login: Prevents any user from logging in to any workspace. When you need to install a new version of your application you have to undo the Disable Administrator Login as explained above and then undo Disable Workspace Login
• Restrict Access by IP Address: Instead of using the 2 options above you can input a list of IP addresses from which it is OK to login as an administrator or into a workspace
• Workspace Password Policy: It is possible to set a range of options for the password policy for Application Express users (workspace administrators, developers, and end users) in all workspaces. Things like checks for min./max. length and number of alphabetic and numeric characters. It is also possible to define a list of words that a password may not contain

There are other options so make sure to read Configuring Security Settings in the Users's Guide


Author: PeterLorenzen - 29 Apr 2007

Comments