Oracle APEX Custom Authentication Scheme User Role

Question

So I followed the instruction from this blogpost: https://blogs.oracle.com/apex/post/custom-authentication-and-authorization-using-built-in-apex-access-control-a-how-to

to create a custom authentication/authorization scheme. So far the login works well, but I can't figure out how to give a user a certain role. I can add users to the table and they can login sucessfully. However, if I select a role and use the REPLACE_USER_ROLE API from apex, it uses the standard apex_appl_acl_users table instead of my custom users table.

Based on the blogpost, how can I assign user roles to my custom user accounts?

Answer 1

Don't confuse "authentication" and "authorization".

Authentication is about accessing an application. Authorization is about what a user can do in the application. Authorization is done by granting roles to a user in the app - I believe that is what your question is about.

There are 2 ways of controlling application authorization.

1. Define roles and user assignment in the "Application Access Control" shared component. This allows you to use the APEX_ACL API. This is what is described in the blog you mention

2. Define roles and assignments in your own tables. In that case you'll have to write your own pl/sql to manage role/user assignments. Sounds like this is what you want. You can create authorization schemes on top of your own tables