Is there a way to block access to Oracle Application Express resource files (js,css, etc.) without a valid session?
files like these:
the /i/ folder contains pure static resources. in Many environments, there are served by the Apache (or other) web server - APEX or the database is not hit at all when such a file is requested.
so, the answer is no - there files are always accessible - like any other static file on a web server.
What is the reason for this requirement...?