Security - Oracle APEX Best Practices - page 155

The following screenshot shows the Security Attributes section:
Time out\settings can also be set programmatically during runtime. This can be
performed with the APEX_Util.set_session_lifetime_seconds and APEX_Util.
set_session_max_idle_seconds API procedures.
Password complexity rules
The Oracle Application Express administrator can create password complexity rules
or a policy, for the passwords from the available accounts in an instance. These rules
apply to all the accounts in the installation, across all the workspaces. You can set
multiple complexity rules and re-use rules across an instance.
The following are examples of password complexity policies of passwords:
• It should contain at least one uppercase character
• It should contain at least one numeric digit
• It must be at least six characters long
You can set all the available parameter values within the APEX_INSTANCE_ADMIN
package. You should be able to set the password preferences, such as PASSWORD_
NOT_LIKE_USERNAME , PASSWORD_NEW_DIFFERS_BY , and PASSWORD_ONE_ALPHA , using
the APEX_INSTANCE_ADMIN API.
Additional documentation about the APEX_INSTANCE_ADMIN package can be found
at: http://docs.oracle.com/cd/E23903_01/doc/doc.41/e21676/Oracle
Application Express_instance.htm#CHDFGJEI .