2 Replies Latest reply: Feb 13, 2013 3:06 PM by JackieW RSS

    session state protection - no url access

    JackieW
      I'm using APEX 4.1.0 and Oracle 10g.

      I've started applying Session State Protection to my APEX pages. The "Arguments Must Have Checksum" option works great for those pages accessible by URL links. The "No Arguments Allowed" option also works just fine for those pages which have no arguments. But I have not gotten "No URL Access" to work for any of my pages that are accessible from page branches with arguments.

      Ideally, I'd like to see an example of "No URL Access" in action. I've looked all over the place and haven't found a good example.

      Here is one of the branches in my application I've tried:

      The Action section of the Branch definition:
      Target type: Page in this application
      Page: 20 <-----------This is the page with "No URL Access" set.
      Request:
      Clear Cache: 20,RIR
      Set these items: IR_ACOL,IR_BCOL
      With these values: &P10_AITEM.,&P10_BITEM.
      I don't think there's anything special here about using IR filters. It's the same problem with other types of item value pairs. Let me know if you need any more information.
      Thanks,
      Jackie