OHS, EPG, and APEX Listener Compared - Expert Oracle Application Express - page 55

Figure 1-27. Accessing the listenerAdmin URL.
Here you can use the username adminlistener and the same password you provided during the
APEX Listener startup. Once you log in successfully, you will see the same configuration screen you saw
earlier.
Each of the configuration tabs covers a different area of functionality. For example, in the Security
tab you can define the names of any procedures you want to allow or disallow to be accessed directly
through the URL. In Figure 1-28, we have defined in the Inclusion List that we are allowed to directly
access any procedures, packages, or functions in the training schema, since we have used the wildcard
entry training.* . Note that this is probably a very bad idea, but it demonstrates the flexibility you have
when combining the Inclusion and Exclusion list to get very granular controls over the permissions.
Figure 1-28. Allowing direct access to procedures
We can go one step further and, rather than statically defining the Inclusion and Exclusion list, we
can dynamically check whether the URL is allowed or not by defining a validation function, as shown in
Figure 1-29.