5 Replies Latest reply: May 6, 2013 7:20 AM by Gus C RSS

    Log SSP and Authorization Errors

    Gus C
      I asked for this on the feature request website
      "It seems that apex does not log SSP errors or Authorization errors, or if it does, they are no available in an apex view. For example, if a user changes the page number in the url to a page he is not authorized to see, an error page is dispalyed, telling him that he cannot see this page. As far as I can tell, this error is not logged in the apex views. Same goes for, when a user tries to change an id in the url."

      My item was closed with the comments
      "The error messages are logged into the activity log if activity logging is enabled for your application. Have a look at the column ERROR_MESSAGE in the view APEX_WORKSPACE_ACTIVITY_LOG. "

      Well I tested it again.
      I went to a page and changed the item_id and I received the checksum violation message.
      I then did a select * FROM APEX_WORKSPACE_ACTIVITY_LOG and looked for the error message.

      There was no error message.

      Can someone else try this

      Gus
        • 1. Re: Log SSP and Authorization Errors
          TexasApexDeveloper
          If you are using the enhanced APEX error/exception handling that came with APEX 4.0, does this catch the error for you??

          Thank you,

          Tony Miller
          Ruckersville, VA
          • 2. Re: Log SSP and Authorization Errors
            Patrick Wolf-Oracle
            Hi Gus,

            I just have setup another test at apex.oracle.com

            workspace: patricks_test
            user: guest
            pwd: 123456

            1) Run application 24683 and login as guest/123456
            2) If you click "Customers" you will get the authorization error
            3) If you click "Products" and then pick a product to navigate to page 6 and afterwards modify the value of P6_PRODUCT_ID you will get the checksum error
            4) In the Builder navigate to Administration -> Monitor Activity -> By Application -> 24683 and you will see the entries of APEX_WORKSPACE_ACTIVITY_LOG

            When you did the query on APEX_WORKSPACE_ACTIVITY_LOG, did you verify that your app is writing activity logs at all? And second, have you connected with the parsing user of your application?


            Regards
            Patrick
            -----------
            Member of the APEX development team
            My Blog: http://www.inside-oracle-apex.com
            APEX Plug-Ins: http://apex.oracle.com/plugins
            Twitter: http://www.twitter.com/patrickwolf
            • 3. Re: Log SSP and Authorization Errors
              Gus C
              I looked at the application oracle.com and yes it loggs.

              My application is on version 3.2.
              I looked in Shared Components/Edit Application Definition.
              The logging is set to Yes.

              There is only one schema for this application.
              Tried select * from APEX_WORKSPACE_ACTIVITY_LOG
              but still no error messages

              Gus
              • 4. Re: Log SSP and Authorization Errors
                Patrick Wolf-Oracle
                Hi Gus,

                the very important information about your used version was missing. The logging of the error/authorization has been enhanced in 4.1 (I believe).

                If you can't upgrade to 4.2 you might want to have a look at one of the following solutions which should work in 3.2

                http://oracleinsights.blogspot.co.uk/2009/06/oracle-apex-user-friendly-exceptions.html
                http://www.talkapex.com/2010/09/custom-error-messages-in-apex.html

                Regards
                Patrick
                -----------
                Member of the APEX development team
                My Blog: http://www.inside-oracle-apex.com
                APEX Plug-Ins: http://apex.oracle.com/plugins
                Twitter: http://www.twitter.com/patrickwolf
                • 5. Re: Log SSP and Authorization Errors
                  Gus C
                  Thanks for the information

                  Gus