Go to Shared Components.

Click on the Authorization Schemes link. You can find it in the Security section.

Next, you might see the authorization schemes that have already been created. If no authorization schemes have been created in the past, you see an empty page. Click on the Create button.

Next, select From Scratch and click on Next.

Next, enter a name for this authorization scheme and enter the conditions in the Authorization Scheme section.

In our case, we name the scheme AUTH_ADMIN. The scheme type could be a PL/SQL function returning Boolean or an EXISTS SQL query. You have to create this function or query by yourself. The code could be included in the Expression 1 textarea but you can also make a call to a function stored in the database. In our case, we put the code in here and we choose for the EXISTS SQL query. You see the query as follows:

select 1
from   app_users 
where  username = :APP_USER 
and    role = 'ADMIN'
[9672_01_11.txt]

The query returns 1 if the username is the current user (:APP_USER) and the user has admin privileges.

Also, enter the error message APEX should display if the query returns no rows. Click on the Create button.

In the Evaluation Point section, select Once per page view to validate the authorization scheme. This will make APEX check the authorization for every call that is made to pages (or other components) using this scheme.

The other option is Once per session. This is much more efficient, because the check is only done once (at the start of the session). But when it's possible that the session state changes or there is anything else that is not consistent during the session, this option is not reliable.

The authorization scheme is now ready. Now, page access must be restricted by this authorization scheme.

Go to the page that requires authorization and click on the Edit icon (the pencil) in the Page section.

Go to the Security section and select the Authorization Scheme we just created (AUTH_ADMIN) in the Authorization Scheme list element.