HTTP-403 Forbidden Error While Trying To Access The DB Procedure From The URL (Doc ID 783646.1)

Last updated on MAY 24, 2016

Applies to:

Oracle Application Express (formerly HTML DB) - Version 3.0.1 to 4.0.2 [Release APEX 3.0 to 4]
Information in this document applies to any platform.
***Checked for relevance on 14-Aug-2013***

Symptoms

When attempting to access the PL/SQL procedure from the browser,the following error occurs:

HTTP-403 It is forbidden to call this procedure directly from the browser !



The issue can be reproduced at will with the following steps:

1. Created a procedure in the database and granted privilege to the PUBLIC

2. Tried to access that procedure from a URL that uses the APEX DAD:

The forbidden error is thrown.

Note: The steps in this note will not work if the procedure  is created in the APEX schema such as APEX_040200.  Once wwv_flow_epg_include_modules.authorize is enabled the procedure cannot be called regardless of the entries set in the wwv_flow_epg_include_mod_local function.

 

Changes

This problem appears with the following parameter included as part of the dads.conf starting with  APEX Version 3.0:

PlsqlRequestValidationFunction  wwv_flow_epg_include_modules.authorize

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms