Search This Blog

Saturday, February 4, 2023

403 Forbidden Access to the procedure named: apex is denided / www_flow.accept is denied

403 Forbidden  

Access to the procedure named: apex is denied

403 Forbidden  

Access to the procedure named: www_flow.accept is denied



We faced this issue in our running oracle apex application. It was Oracle Apex 20.2 and ORDS 17.4 

Here is the solution from our side:

Just go to the schema browser and open the function. Then edit the function like below. 

create or replace function wwv_flow_epg_include_mod_local(

    procedure_name in varchar2)

return boolean

is

begin

    --return false; -- remove this statement when you modify this function

    --

    -- Administrator note: the procedure_name input parameter may be in the format:

    --

    --    procedure

    --    schema.procedure

    --    package.procedure

    --    schema.package.procedure

    --

    -- If the expected input parameter is a procedure name only, the IN list code shown below

    -- can be modified to itemize the expected procedure names. Otherwise, you must parse the

    -- procedure_name parameter and replace the simple code below with code that will evaluate

    -- all of the cases listed above.

    --

   IF upper(procedure_name) IN (‘apex’ 

   --... other procedures already listed

   )

   THEN

      return TRUE;

   ELSE

      return FALSE;

   END IF;

end ;

wwv_flow_epg_include_mod_local;



Here are some other discussions and solutions that I get over the internet.


https://halimdba.blogspot.com/2023/02/403-forbidden-access-to-procedure-named.html


https://joelkallman.blogspot.com/2016/07/securing-application-express-when-using_24.html


https://www.promatis.at/en/2022/07/13/lessons-learned-while-upgrading-apex-and-ords-to-22-1/





No comments:

Post a Comment

Restrict File Upload by File Type in Oracle Apex

If you want to restrict file upload by file type/extension/format you can follow the below steps.  Goto File Browser Item --> Advanced --...