Oracle ACL and Oracle APEX | ACL concepts for Oracle APEX Developer

Oracle ACL and Oracle APEX
Oracle ACL (Access Control List) and Oracle APEX (Application Express) are two different components of the Oracle technology stack that serve different purposes. Let's understand each of them separately:
Oracle ACL (Access Control List):
Oracle ACL is a security mechanism used to control network access privileges for various Oracle network services. It provides a way to explicitly grant or deny access to network resources such as protocols, hosts, IP addresses, and ports. ACLs are used to define a set of rules that determine which network connections are allowed and which are blocked.
Oracle ACLs are commonly used in Oracle databases to control the network access of different database users or roles. They are particularly useful for securing network services like Oracle Net Services, which includes components such as listener, Oracle Connection Manager, and Oracle Database Gateway.
By defining ACLs, you can regulate and restrict network access to prevent unauthorized connections and protect sensitive data within your Oracle infrastructure.
Oracle APEX (Application Express):
Oracle APEX is a low-code development platform that allows users to rapidly build web-based applications using SQL and PL/SQL. It provides a browser-based environment where developers can create database-driven applications without the need for complex coding.
APEX supports rapid development by offering a set of pre-built components, templates, and themes, which can be customized to create interactive and user-friendly applications. It utilizes Oracle Database as the backend, leveraging the power and scalability of the Oracle Database engine.
With Oracle APEX, developers can quickly create data-centric applications, reports, forms, and dashboards, making it suitable for a wide range of use cases, from small departmental applications to enterprise-grade solutions.
Oracle APEX also includes built-in security features, such as user authentication and authorization, session management, and protection against common web vulnerabilities. These security features help ensure that APEX applications adhere to best practices and protect data integrity.
In summary, Oracle ACL is a security mechanism used to control network access privileges, while Oracle APEX is a development platform for creating web-based applications with a focus on rapid development and data-centric functionality.
SCRIPT
www.erpstuff.com/viewtopic.ph...

[@marceloosorio525]

My "Thumb UP" for you ... Much better now.... but anyway there was some changes in 19c ... and those changes are not enought to connect... I have provide the ACLs properly, created the wallet, installed the certificate , call the WS adding the wallet but anyway im getting "ORA-53203: Security Violation " ... and this is something new for me... any clue? comments ? We are on apex 23.2

[@ERPstuff]

Thanks and you have not provided enough details what you did and how you did as per error seems related privs not granted to the host or port issues, select a.lower_port, a.upper_port from dba_network_acls a where a.host like '%' if you can't share details here then email to [e-mail] thanks

[@fahdbahoo1]

very usefull. you used wallet in UTL_HTTP example, please also make video on how to configure wallet. also you did not provide wallet with apex_web_service example, why ? is it not needed ?

[@ERPstuff]

Sure wallet need to be covered while for APEX you can assign wallet in APEX instance settings hence here not required.

[@kamruzzamanpintu8670]

So helpful... Thanks

[@ERPstuff]

Glad it was helpful!

[@skamransajjad7]

Its parity much clear now....

[@ERPstuff]

Happy to hear it was of any use. Thanks

[@faisalusmani9063]

Sir please help about configure UTL_HTTP for oracle apex with wallet in detail please make same vdo on it

[@ERPstuff]

Why do you want this to use instead of apex functionality?

[@hunterzolomon2898]

Hello sir! For which user should I create an ACL to use that utl_http from Oracle Apex SQL Commands? And for example, I created an ACL for twilio api host but oracle sql developer still gives me ACL error Can you please help?

[@ERPstuff]

all explained in the video which users to given access. thanks

[@sachintallapally8388]

who are you sir ? and where were you ? You have lot of patience ... wish I would have worked with you for atleast 1 year :)

[@ERPstuff]

Thanks

[@camorra77official84]

I do all the Same and still get the error , any ideas?

[@ERPstuff]

Without knowing error can't say anything.