4 Replies Latest reply: Jun 23, 2013 10:23 AM by Hendry Lai RSS

    Form 11g - Is is possible to block specific forms access when user directly type form name in url ?

    Hendry Lai

      Hi everyone,

       

      We have XXF000.fmb, XXF001.fmb , XXF002.fmb , XXF003.fmb in 6i.

      For migration to 11g , we recompile these forms and move fmx to 11g form server under form_path.

       

      In 6i , we login for validation & responsibilities control in XXF000, So we can use account info to verify if user have priviledge to access XXF001, XXF002 and XXF003.

      But in 11g , we can access these forms vial url request , such as : http://<host>:<port>/forms/frmservlet?form=XXF000   ; http://<host>:<port>/forms/frmservlet?form=XXF001  ... etc

      These may cause some unexpected access and operations in functions.

       

      Is is possible to block specific forms access when user directly type form name in url ?

       

      Thanks.

       

      Hendry