This discussion is archived
5 Replies Latest reply: May 6, 2013 5:20 AM by Gus C RSS

Log SSP and Authorization Errors

Gus C Journeyer
Currently Being Moderated
I asked for this on the feature request website
"It seems that apex does not log SSP errors or Authorization errors, or if it does, they are no available in an apex view. For example, if a user changes the page number in the url to a page he is not authorized to see, an error page is dispalyed, telling him that he cannot see this page. As far as I can tell, this error is not logged in the apex views. Same goes for, when a user tries to change an id in the url."

My item was closed with the comments
"The error messages are logged into the activity log if activity logging is enabled for your application. Have a look at the column ERROR_MESSAGE in the view APEX_WORKSPACE_ACTIVITY_LOG. "

Well I tested it again.
I went to a page and changed the item_id and I received the checksum violation message.
I then did a select * FROM APEX_WORKSPACE_ACTIVITY_LOG and looked for the error message.

There was no error message.

Can someone else try this

Gus
  • 1. Re: Log SSP and Authorization Errors
    TexasApexDeveloper Guru
    Currently Being Moderated
    If you are using the enhanced APEX error/exception handling that came with APEX 4.0, does this catch the error for you??

    Thank you,

    Tony Miller
    Ruckersville, VA
  • 2. Re: Log SSP and Authorization Errors
    Patrick Wolf Employee ACE
    Currently Being Moderated
    Hi Gus,

    I just have setup another test at apex.oracle.com

    workspace: patricks_test
    user: guest
    pwd: 123456

    1) Run application 24683 and login as guest/123456
    2) If you click "Customers" you will get the authorization error
    3) If you click "Products" and then pick a product to navigate to page 6 and afterwards modify the value of P6_PRODUCT_ID you will get the checksum error
    4) In the Builder navigate to Administration -> Monitor Activity -> By Application -> 24683 and you will see the entries of APEX_WORKSPACE_ACTIVITY_LOG

    When you did the query on APEX_WORKSPACE_ACTIVITY_LOG, did you verify that your app is writing activity logs at all? And second, have you connected with the parsing user of your application?


    Regards
    Patrick
    -----------
    Member of the APEX development team
    My Blog: http://www.inside-oracle-apex.com
    APEX Plug-Ins: http://apex.oracle.com/plugins
    Twitter: http://www.twitter.com/patrickwolf
  • 3. Re: Log SSP and Authorization Errors
    Gus C Journeyer
    Currently Being Moderated
    I looked at the application oracle.com and yes it loggs.

    My application is on version 3.2.
    I looked in Shared Components/Edit Application Definition.
    The logging is set to Yes.

    There is only one schema for this application.
    Tried select * from APEX_WORKSPACE_ACTIVITY_LOG
    but still no error messages

    Gus
  • 4. Re: Log SSP and Authorization Errors
    Patrick Wolf Employee ACE
    Currently Being Moderated
    Hi Gus,

    the very important information about your used version was missing. The logging of the error/authorization has been enhanced in 4.1 (I believe).

    If you can't upgrade to 4.2 you might want to have a look at one of the following solutions which should work in 3.2

    http://oracleinsights.blogspot.co.uk/2009/06/oracle-apex-user-friendly-exceptions.html
    http://www.talkapex.com/2010/09/custom-error-messages-in-apex.html

    Regards
    Patrick
    -----------
    Member of the APEX development team
    My Blog: http://www.inside-oracle-apex.com
    APEX Plug-Ins: http://apex.oracle.com/plugins
    Twitter: http://www.twitter.com/patrickwolf
  • 5. Re: Log SSP and Authorization Errors
    Gus C Journeyer
    Currently Being Moderated
    Thanks for the information

    Gus

Legend

  • Correct Answers - 10 points
  • Helpful Answers - 5 points