I'm new to a site and to APEX as an Oracle DBA. Nothing fancy, the workspace groups are APEX.RO, APEX.RW, and INTERNAL. The RO end-users use APEX just for production queries, but it seems the developer role has to be assigned for an end-user to access the SQL Workspace. Therefore, end-users inherit the developer classification. Next, for reasons fully undocumented, the former contract holder granted excessive system privileges directly to the APEX.RW account.
Has anyone experienced a reason why APEX security cannot follow recommended, time-tested permissions that are least-necessary? Or a way I might open up SQL Workspace to end users? TIA.