Authorization Schemes

Now that we are able to identify users of our applications, our next security task is to control what functionality the user can access within our application. In APEX this is implemented through an Authorization Scheme. An Authorization Scheme is a security condition that will either pass or fail. A pass enables the user to access functionality, while a fail denies the user access to the functionality. Multiple Authorization Schemes can be added to an application, which are then assigned to functionalities within our application, such as pages, regions, items, or buttons to restrict access. This means the user must pass the Authorization Scheme condition to be able to view the functionality. In this section we will see how to add an Authorization Scheme to our application and assign it to a page or item.

Note

Authorization Schemes are very similar to a role. Roles are physically granted to a user, but with an Authorization Scheme a condition is defined using SQL, PL...