apex overview

58
<Insert Picture Here> Oracle Application Express Rapid Application Development Tool

Upload: filasbraga

Post on 24-Apr-2015

88 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Apex Overview

<Insert Picture Here>

Oracle Application Express Rapid Application Development Tool

Page 2: Apex Overview

© 2009 Oracle Corporation – Proprietary

The following is intended to outline Oracle’s general product direction. It is intended for information purposes only, and may not be incorporated into any contract. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decisions.The development, release, and timing of any features or functionality described for Oracle’s products remain at the sole discretion of Oracle.

Page 3: Apex Overview

© 2009 Oracle Corporation

Oracle Application Express (APEX)Database-centric Web development tool

• Unique Rapid Application Development (RAD) tool for the Oracle Database

• Browser based for Development, Deployment & Use

• Declaratively build professional Web 2.0 applications that are fast and secure

• Leverages full Oracle database capabilities and existing SQL & PL/SQL skills

• Standard component of the database• Fully supported, “no-cost” option with all

editions of the Oracle Database

Easy to develop • Easy to deploy • Easy to manage

Presenter
Presentation Notes
Discussion Points: Database-centric – Can very rapidly build applications on top of existing Oracle tables and views Browser Based – No client software required Declarative – Utilizes extensive wizards to produce applications; easy to enhance and maintain as design presented consistently in declarative framework Oracle DB – Built directly into the Oracle DB so easy to integrate with other DB features Fully Supported – Dedicated Oracle Support team which specializes in Oracle Forms and APEX only. “No-cost” option – Can develop as many applications with as many users as you like within existing Oracle DB license terms
Page 4: Apex Overview

© 2009 Oracle Corporation

• Developer community - Estimated at 250k, 100k+ downloads / year

• apex.oracle.com - 3m page views / week, 16k workspaces

• Active Discussion Forum - 3.6m views, 41k threads, #3 on OTN

• 5 Books, 50 BLOGs, 10 Hosting Partners

• Major Focus of ODTUG including APEXposed Conference

Oracle Application Express Momentum

Presenter
Presentation Notes
Discussion Points: Developer community – hard to estimate as APEX installed with 11g by default; one installation can be for a single developer or a whole team. Apex.oracle.com - Growing @ over 200 new accounts / week Discussion Forum - #3 behind only ‘General Database’ and ‘SQL & PL/SQL’ Extensive conference participation - See http://apex.oracle.com/pls/otn/f?p=59652:5 for chart on APEX conferences Packagaded Apps - Average 3,500 downloads / week
Page 5: Apex Overview

© 2009 Oracle Corporation

Oracle Technology Network (OTN)• Download latest Release• Getting Started• Documentation & Tutorials

• Hosted Environment• Oracle By Examples• Community & Partners

Presenter
Presentation Notes
Discussion Points: This site is rigorously maintained to provide the most up to date information Wealth of information for both those starting out and the experienced APEX developer For those getting started recommend the following: Hosted apex.oracle.com – Sign up for a free development account so you can start immediately without needing to install anything Documentation & Tutorials – Specifically 2 Day + Developers Guide Oracle By Examples – Step-by-step tutorials to develop specific functionality Packaged Applications - Point solutions that can be used as is or enhanced to meet specific requirements or used purely for learning Community & Partners – Especially the Blogs – Using a blog aggregator recommended OU Courses & Community Events – Instructor led courses, etc. APEX OTN Forum – If you have a question chances are it has already been asked and answered on the forum
Page 6: Apex Overview

© 2009 Oracle Corporation

Community Focus• Strong & Supportive Community• Popular OTN Discussion Forum• Consulting Companies APEX

Practices • Commercial Applications• Blogs, SIGs

Presenter
Presentation Notes
Discussion Points: Given that APEX is a “no-cost” feature of the Oracle DB don’t get a lot of marketing However, have an exceedingly strong community which has grown through word of mouth APEX OTN Forum has a wealth of information and the community will happily answer questions both simple and advanced
Page 7: Apex Overview

© 2008 Oracle Corporation – Proprietary

2006 Application Express 2.2Packaged Applications

History

2006 Application Express 2.1Oracle XE

2005 HTML DB 2.0SQL Workshop

2004 HTML DB 1.6Themes

2004 HTML DB 1.5First Release

2007 Application Express 3.0Flash Charts, PDF Printing, Access Application Migration

2008 Application Express 3.1Interactive Reports, BLOB

2009 Application Express 3.2Forms Conversion

Page 8: Apex Overview

© 2009 Oracle Corporation

Targets the Rapid Application Development Community

Presenter
Presentation Notes
Discussion Points: APEX is targeted at the Rapid Application Development (RAD) developer. APEX best suited to Departmental / Targetted applications. Not to say it can’t be used for enterprise applications or developed by end-users – Many examples of both Advantage over scripting languages is the declarative framework and longevity as based on PL/SQL which has been around for 20 years Productivity Apps = Packaged Applications which are a set of self service productivity applications usable by non-programmers.
Page 9: Apex Overview

© 2009 Oracle Corporation

Packaged Applications

• Over 30 Packaged Applications and Sample Code• – Created by APEX Development Team

• Fully functional solutions • – Use as is / Customize / Learning tool

• No Cost• – Includes source code, DDL, sample data

Presenter
Presentation Notes
Discussion Points: Introduced in the APEX 2.2 Allows you to Package your application and its underlying Database objects into a single installer. In addition, you can define a set of pre and post installation steps that ensure that the application is installed without errors. Upgrade scripts allow you to define modifications to DB objects (add column, update data, insert data, etc) when upgrading from early version. This makes importing and installing an application similar to what a Typical Application install should be like.
Page 10: Apex Overview

© 2009 Oracle Corporation

Out of the Box Development Features

Reports

Forms

Charts

Calendar

Templates

Navigation

Validations

Processes

Computations

Branches

Web Services

Email Services

Translation Services

Conditional Processing

Authentication

Authorization

Session State Management

Logging & Monitoring

Presenter
Presentation Notes
Discussion Points: Many RAD Tools provide widgets, etc shown in the first column A Few have some of the second column covered as well But how many of them have include this third column out of the box. When we say out-of-the-box here we don’t mean this features can be implemented (under your breath) with a ton of complex code but 100% declarative - no coding For example: APEX Application Builder is built with APEX and is provided in all the Oracle standard languages using the Translation Services Every component (page, button, item, validation, etc) can be controlled with conditional logic to make a very flexible application Authentication frameworks for LDAP, SSO, Database users, etc are included to make it easy to integrate with corporate standard Authorization allows for grouping of permissions to make it easy to ensure user access to application functionality is correctly maintained Session state management is built directly into the tool to ensure security and consistency Developers can concentrate on meeting business requirements rather than the plumbing required to ensure the application they deliver is secure, scalable, and reliable.
Page 11: Apex Overview

© 2009 Oracle Corporation

Interactive Reports• Out of the box declarative Web 2.0 reporting• Dramatically enhances end-user capabilities

Presenter
Presentation Notes
Discussion Points: Empowers end-users to customize the data presentation to meet their specific requirements Developer simply defines report data – Select * from my_favorite_table and then the end-user can manipulate the information as required rather than developer having to deliver multiple static reports. Actions can be disabled by developer if necessary Where possible much better to demonstrate Interactive Reports rather than just talking through the capabilities
Page 12: Apex Overview

© 2009 Oracle Corporation

Problem: Spreadsheets

• Manual collation from different sources• Reports generated from partial truth• No controls over who sees the information

• Multiple sources of truth

Presenter
Presentation Notes
Discussion Points: - Majority of Organizations/Companies use spreadsheets extensively - Every organization wastes time using spreadsheets to collect information from groups of people. Spreadsheets are sent out, people add data to it and then send it back. The recipient is left merging spreadsheet and cleaning up errors. There are inevitably several versions of the same spreadsheet floating around – Often inaccurate data will be used for reporting Given the data is often sent as an email attachment there is no control over who has access to the data Spreadsheets have become part of the critical IT infrastructure of your business without even providing web access. Organizations often using the wrong software because it happens to be the path of least resistance. While a spreadsheet is a good communication tool, it is woefully inadequate to serve as a multi user database. This is because with spreadsheets, everybody has their own copy, which makes it impossible to make sure you’re working on the most up to date version of the “project tracking spreadsheet.”
Page 13: Apex Overview

© 2009 Oracle Corporation

Problem: Personal Databases

• Fragmented• Platform dependent• Web unfriendly

• Backups inconsistent• Scattered locations• Inefficient utilization of IT

resources

• Password Security inadequate• Vulnerable• Can be easily copied

Presenter
Presentation Notes
Discussion Points: Fragmented- Data in many places With an IT infrastructure based on spreadsheets and desktop databases, there is much duplication of effort and very little control over security or backups. Would you know where all the important (let alone mission-critical) Access Applications within your organization are stored, who maintains them and how? Platform dependent - MS Windows only Web unfriendly - Need to install client software MS Access nor spreadsheets allow access from anywhere with a web browser. MS Access cannot be deployed to the web. Password Security – Can buy password cracks on the Internet Vulnerable- Data not secure Security is impossible to implement with personal databases as you never know who looked at which data; or who updated certain cells in the sheet; or Copying - Walk away with the entire application on a thumb drive Backups – Individuals responsibility, not centralized Scattered – May reside on file servers, desktops, laptops Inefficient IT – IT often have to adopt users applications; undocumented; poor data modelling; include manual processes
Page 14: Apex Overview

© 2009 Oracle Corporation

Problem: Meeting Business Requirements

Centrally managed Enterprise DatabaseBacked-upSecureScalable

Need to do more with fewer people and less budget

Gain more data visibilityIntegrate data silosAdditional reportingIncrease productivityReact to market forcesMeet compliance

requirements

Presenter
Presentation Notes
Discussion Points: Organization doing the right things with (Oracle) Enterprise Database which is professionally managed by IT BUT … More is required to break-down isolated applications and data silos to provide cross-application integration, reporting, etc. Need to be able to build new applications as quickly as the market moves Need to ensure all obligations are satisfied in regards to data access for compliance At the same time IT budgets are shrinking so need to work smarter to meet demands
Page 15: Apex Overview

<Insert Picture Here>

Oracle Application ExpressIntegrated with SQL Developer

Page 16: Apex Overview

© 2009 Oracle Corporation

SQL Developer and Application Express• Browse your Application Express

Applications• Manage Applications

(Export / Import / Deploy / Drop)• Modify Applications• Monitor / Tune your Queries• Remote Debugging• Included APEX Reports• Custom Exception Reports

Requires SQL Developer 1.2.1 +and Application Express 3.0.1 +

Page 17: Apex Overview

Oracle SQL Developer

• Database Development IDE• Popular

• Most downloaded Oracle tool• 1.5m users• #1 Oracle database development IDE

• Distribution (No Cost)• With Database – All Editions• OTN download

• Benefits• Productivity• Ease of use

Introduced March 2006

© 2009 Oracle Corporation

Page 18: Apex Overview

© 2009 Oracle Corporation

Oracle SQL Developer Data Modelling

• New SQL Developer graphical data modelling supports• Designing logical Entity Relation Diagrams (ERD)• Building relational schema designs• Add physical database details• Generating and executing DDL scripts• Reverse engineering of existing data structures • Import of data models from Erwin and Designer

• Provides modelling for multiple databases• Oracle Database • DB2 (Mainframe & UDB) • SQL Server

• Supports • Multi-dimensional modelling (incl. cubes and spatial)• Multi-level logical and physical design environment• Model validation rules

Page 19: Apex Overview

Oracle Improving Developer Productivity• Improving developer productivity over each phase of the database application development life cycle

• Improving developer productivity with new tools: SQL Developer, and Application Express

• Introducing database data modeling

* SQL Developer Data Modeling and SQL Developer Unit Testing not yet released

© 2009 Oracle Corporation

Presenter
Presentation Notes
Discussion Points:
Page 20: Apex Overview

<Insert Picture Here>

Oracle Application ExpressConsolidation / Migrations / Conversions

Page 21: Apex Overview

© 2009 Oracle Corporation

MS Access to APEX MigrationDrivers

• Consolidation of departmental applications to centrally managed IT• Some applications have grown and become mission critical• Web unfriendly• Platform dependent• Poor security• Limited scalability / excessive network traffic

Challenges• Effort / business knowledge required to migrate• Poor data model design• No documentation

Presenter
Presentation Notes
Discussion Points: Access is loved by business users because they can build their own applications without needing to rely on IT. What start out as simple departmental applications often grow in importance and functionality but without any of the safeguards of applications developed by IT. Once the original creator moves on there is often no one left who knows anything about the application. When one of these applications fails it is normally IT who has to scramble to work miracles and correct applications they may have no prior knowledge of.
Page 22: Apex Overview

© 2009 Oracle Corporation

MS Access Migration- SQL Developer and Oracle APEX

• Export MS Access metadata • Migrate the Microsoft Access

database to Oracle • Create an Oracle Application

Express Workspace • Create a migration project • Analyze the Microsoft Access

application • Generate the Oracle Application

Express Application • Customize your Application

Express application

Presenter
Presentation Notes
Discussion Points: You need to use both SQL Developer and APEX to migrate Access applications SQL Developer is used to migrate the data schemas and data across to the Oracle database APEX is used to generate a first-cut design based on the Forms, Reports and Queries within the Access application Many companies consolidate the Access tables as part of the migration (e.g. 5 different customer tables into one customer table) In such cases often quicker to build APEX application from scratch using the built-in APEX wizards. The value in creating an APEX project and generating is not just in the ability to generate a first-cut design. It is also the ability to review and analyze all the source from the Access application, including the VB source which can’t be generated. Especially for undocumented, complex applications APEX developers can review the old functionality to determine how to create the replacement application.
Page 23: Apex Overview

© 2009 Oracle Corporation

Oracle Forms to APEX ConversionDrivers

• Modernization of software / hardware• Incorporate Web 2.0 capabilities• Deliver greater user interactivity• Utilize existing Database objects• Can re-use existing IT developer skill-set • Difficulty finding new Oracle Forms developers

Challenges• Availability of IT application matter experts• Conversion is non-trivial, requiring significant effort and resources• APEX application will not look nor feel like Forms application

Presenter
Presentation Notes
Discussion Points: Forms has been around since the 1980’s and has a very loyal and well deserved following. Forms is not being de-supported and Forms 11 is due soon. Primary driver for many is they have applications written in old versions of Oracle Forms which is not fully supported. Their existing development staff is very comfortable with SQL & PL/SQL and used to working within a declarative environment, therefore, the transition to APEX should be quick and they should feel somewhat comfortable with the APEX Application Builder. Developers will need to learn the differences in the tools and paradigm (e.g. stateful v’s stateless, etc.) The resulting APEX applications will not look nor behave exactly the same as the old Forms application so it is important to keep users involved throughout the conversion project. Converting Oracle Forms to any other tool is going to require significant investment in time and resources. Prototyping is strongly recommended to get user’s buy-in and be able to estimate the total effort involved in order to build a realistic project plan.
Page 24: Apex Overview

© 2009 Oracle Corporation

Oracle APEX Forms Conversion Overview

Presenter
Presentation Notes
Discussion Points: Converting from Oracle Forms to APEX (or to any other tool for that matter) requires significant investment of time and resources. It is strongly recommended that you undertake a Proof-of-Concept to determine the effort required and expected results before creating a project plan. Given that Oracle Forms and APEX applications can happily co-exist, it is advisable for large applications that development be broken into multiple stages or releases. Oracle Forms History since 1987 Forms 2.0, 2.3, 3.0 - Character Mode Forms 4.5, 5.0, 6i - Client Server Oracle Forms 9i, 10g –Forms Server Oracle Forms 11g Under Development - Large and active customer base - Fully supported and being enhanced - Used by Oracle Applications through R12 - No mandate that customers must migrate existing Forms applications
Page 25: Apex Overview

© 2009 Oracle Corporation

Load Oracle Forms Source

• Run Forms2XML Utility

• Create APEX Project

• Upload Source Files

Forms2XML Utility:• Available with Forms 9i & 10g• May convert Forms 4.x & 6i

• If conversion fails will need to manually upgrade first

Presenter
Presentation Notes
Discussion Points: Once you have created the XML Files then you need to Create a project in APEX {Ensure APEX Schema has relevant Tables / Views} and then load all the source files Load all source files (not just Forms and Reports) eventhough they can’t all be generated. Then developers don’t need to go back to Oracle Forms (For new developers don’t need to install Forms and learn how to navigate around, etc.) All components can then be annotated and tracked throughout the project
Page 26: Apex Overview

© 2009 Oracle Corporation

Step 1: Identify Components to be Generated

• Browse Components• Blocks

• Select / Deselect• Enhance SQL Query

• Items• Select / Deselect• Review Prompts

• Annotate– Triggers, Program Units, Alerts, etc.

• Is it Applicable?• Document post-generation requirements

Presenter
Presentation Notes
Discussion Points: Heavy utilization of Interactive Reports allows analysts to quickly navigate around and update components as necessary
Page 27: Apex Overview

© 2009 Oracle Corporation

Step 2: Automatically Generate Components

• Blocks• Form Interactive Report & Form• Master / Detail• Tabular Form

• Items• Date Pickers• HTML Editors• Checkboxes• Radio Groups• Select Lists• Pop-up List of Values

• List of Values• Reports Interactive Reports

Presenter
Presentation Notes
Discussion Points: Generation uses the exact same “Create Application Wizard” as utilized when creating an application based on an existing Table. Therefore, the generated application does not have any ‘specialized’ code making it hard to enhance, maintain , etc. For details on the generation rules refer to the Migration Guide – Appendix A Forms Generation Capabilities and Workarounds (http://download.oracle.com/docs/cd/E14373_01/migrate.32/e13368/toc.htm)
Page 28: Apex Overview

• Application Logic

• User Interface

• Annotate• Update Completion• Increases % complete

© 2009 Oracle Corporation

Step 3: Manual Post-Generation Tasks

Make same width as box below

Presenter
Presentation Notes
Discussion Points: Re-implementing the business logic and finalizing the UI represent the bulk of the conversion project effort. By utilizing the Annotations you can track your completion progress.
Page 29: Apex Overview

© 2009 Oracle Corporation

Track Conversion Progress

Presenter
Presentation Notes
Discussion Points: Converting from Oracle Forms to APEX needs to be treated as a project and managed accordingly. Generating the initial design only gets you part way to completion of the conversion project. User Acceptance and Training are key to the project’s success.
Page 30: Apex Overview

<Insert Picture Here>

Oracle Application ExpressArchitecture

Page 31: Apex Overview

© 2009 Oracle Corporation

Architectural Overview

• Integrated within the database 9iR2, 10g, 11g, XE• Meta data driven• Uses APEX Listener, Embedded Gateway or ModPLSQL

Presenter
Presentation Notes
Discussion Points: APEX is effectively a 2-Tier architecture where the client (a simple Web browser) talks through to the APEX Engine which resides in the Oracle DB Given the fact it resides in the Oracle Db it can be installed into any edition and any version of the Oracle DB 9iR2 and above SE, SE1, or EE and Oracle XE. The APEX Engine serves HTML pages and processes page submissions based on the meta data stored in tables within the DB Communication between the browser and database can be configured using the APEX Listener (Soon to be released), Embedded PL/SQL Gateway (EPG) which is part of the DB, or Apache and mod_plsql.
Page 32: Apex Overview

© 2009 Oracle Corporation

Multi-Tenant SaaS

• Single Oracle Database for multiple applications• Provides virtual private databases• Self-service or IT managed provisioning

Presenter
Presentation Notes
Discussion Points: Oracle Application Express enables a single database to host large numbers of users. Users work in a dedicated work area called a workspace. A workspace is a virtual private database that enables multiple users to work within the same Oracle Application Express installation while keeping their objects, data and applications private. This flexible architecture enables a single database instance to manage thousands of applications. It turns a single database into a hosted service, making it an ideal platform for consolidation of smaller data stores.
Page 33: Apex Overview

© 2009 Oracle Corporation

Oracle APEX Deployment OptionsDeployable on any Oracle Database accessed using only a Web browser

Cloud / Hosted

On Premise – In Datacenter

On Premise - Departmental Server

Personal Database

Presenter
Presentation Notes
Discussion Points: APEX gives you choices: - Develop and Run it where it makes the most sense for you and your organization. - Across any platform that Oracle runs - Provides you the opportunity to change your mind - Start out in the cloud and move in house or vice versa - Develop on a laptop and deploy to a hosted service - its up to you
Page 34: Apex Overview

© 2009 Oracle Corporation

Oracle APEX and Amazon Cloud

Presenter
Presentation Notes
Discussion Points: Administrators need to configure and maintain the environment using specific add-ons provided by Amazon. For developers and end-users the only difference is the URL used to access APEX
Page 35: Apex Overview

© 2009 Oracle Corporation

Oracle APEX and Amazon Cloud

Presenter
Presentation Notes
Discussion Points: The above configuration is the recommended configuration for running APEX on Amazon Using S3 for storage allows the administrator to easily manage and change the EC2 level of service as required The admin simply defines the service and then mounts the Oracle Database on EBS from S3. This allows maximum flexibility, for example: Turn off development instance over the weekend when developers not working Change from Large Instance to Small Instance for Production applications after hours As application workload increases upgrade from Medium Instance to Large Instance
Page 36: Apex Overview

Why APEX makes sense for the Cloud• Very few moving parts – Simple to manage

• Browser based development / deployment / runtime

• No client-side dependencies

• Multi-Tenant SaaS provides multiple “workspaces”

• Applications easy to migrate to other deployments

• Database Backups also backup application source

• Oracle AMI includes APEX (may require upgrade)

• Webservice Support

© 2009 Oracle Corporation

Presenter
Presentation Notes
Discussion Points: As APEX has a simple architecture and is browser based it makes the transition for developers and end-users seamless - simply provide the URL for the cloud environment. The multi-tenant capabilities allow multiple development teams and their associated applications to co-exist within one Oracle DB minimizing costs (You only need one instance) Given that APEX is fully-contained within the Oracle database maintaining the environment is greatly simplified
Page 37: Apex Overview

© 2009 Oracle Corporation

Building Integrated Applications

Presenter
Presentation Notes
Discussion Points: The APEX Engine, and hence APEX applications, can be easily integrated with outside data sources using Web Services and DB links. Given that APEX resides within the Oracle DB it can easily integrate with other Oracle database features. APEX applications can also be extended using Javascript and AJAX to provide a richer UI.
Page 38: Apex Overview

© 2009 Oracle Corporation

Oracle APEX Listener – Available SoonThe APEX listener will support popular versions of Apache, Web Logic, Tomcat and OC4J. The Oracle Application Express Listener is a Java based mod_plsql replacement for all Oracle APEX releases. The java based listener will support file system caching, FOP transformations to PDF and improved file upload with Oracle APEX 4.0. The Java based listener is also extensible.

Presenter
Presentation Notes
Discussion Points: The APEX Listener is currently undergoing internal testing and should be available shortly. Given the greatly enhanced functionality it will become the preferred listener for use across all versions of APEX on all supported Oracle databases. One of the key attributes of the new listener is that it is Java based and extensible allowing much greater flexibility and improved performance.
Page 39: Apex Overview

<Insert Picture Here>

Oracle Application ExpressSecurity

Page 40: Apex Overview

© 2009 Oracle Corporation

Authentication• Out-of-the-Box Pre-Configured Schemes

• LDAP Directory credentials• Oracle Application Server Single-Sign On• Open door credentials• Application Express accounts• Database Account credentials• No Authentication

• Custom Authentication• Customizable session management logic

• Use or modify (session verification function) built-in page sentry• Develop custom sentry (examples provided)

• Credentials verification custom PL/SQL • Accepts user name and password; Returns Boolean• Only executed once per session

Presenter
Presentation Notes
Discussion Points: Readily integrate user authentication using one of the pre-configured schemes or define your own custom authentication
Page 41: Apex Overview

© 2009 Oracle Corporation

Managing User Access• Authorization

• Pass / Fail checks – cached to improve performance• Can associate to any component (e.g. Application, page, button,

validation, item, etc.)• Various types (e.g. Exists, SQL Query, PL/SQL Function, etc.)

• Session State Protection• Prevent URL Tampering• Utilizes MD5 checksum

• Agnostically use Database Security Features• Fine Grained Access Control (aka VPD); Transparent Data

Encryption; Database Vault; Advanced Security Option; etc.• No APEX development effort required

Presenter
Presentation Notes
Discussion Points: Once the user has gained entry into the application just as important that they can only access processes and data they are permitted to.
Page 42: Apex Overview

© 2009 Oracle Corporation

Administrator Best Practices• Considerations with Embedded PL/SQL Gateway

• Uses XMLDB HTTP Protocol Listener – Part of the Database• Not recommended for internet facing applications

• Configuring Oracle HTTP Server with mod_plsql• Configured using Database Access Descriptors (DADs)• Use PlsqlRequestValidationFunction to allow specified procedures

• Utilizing Secure Sockets Layer (SSL)• Implemented using the HTTPS protocol – encrypts sent / received packets• Prevents data from being sent over unprotected communication channel

• APEX Runtime-Only Environment• Scripts provided to completely remove / re-install Application Builder• Removes Web interface for administration and application development

• Setting Password Complexity Rules• Can set multiple complexity rules / re-use rules across instance

• Using Session Timeout• Set maximum session length and idle time for APEX developer log-ins

Presenter
Presentation Notes
Discussion Points: For more information please refer to the APEX Application Builder User’s Guide – Chapter 13: Managing Application Security – Understanding Administrator Security Best Practices (http://download.oracle.com/docs/cd/E14373_01/appdev.32/e11838/sec.htm#CCHECGBI)
Page 43: Apex Overview

© 2009 Oracle Corporation

Developer Best Practices• Understand Items of type Password

• Don’t emit entered text to screen• Should not save-state or should use Item encryption if saving to the DB• Reports provided to identify at-risk Password items

• Using Zero as Session ID• Critical for PUBLIC applications to ensure no cross-user contamination• Session Id not included in application URL

• Cross-Site Scripting Protection• Protect HTML Regions and other static areas

• Use &ITEM. notation to reference session state variables• Select best Item types based on protection required

• Protect Dynamic Output• Explicitly use escape code when emitting session state

{e.g. htp.p(htf.escape_sc(v('SOME_ITEM'))); }• Protect Report Regions

• References in headings and messages escaped based on Item type

Presenter
Presentation Notes
Discussion Points: For more information please refer to the APEX Application Builder User’s Guide – Chapter 13: Managing Application Security – Understanding Developer Security Best Practices (http://download.oracle.com/docs/cd/E14373_01/appdev.32/e11838/sec.htm#CCHEGCHF)
Page 44: Apex Overview

© 2009 Oracle Corporation

Developer Best Practices• Session State Protection

• Clear session state of unneeded values using Clear Cache built-ins• Enable Session State Protection to prevent URL tampering• Set appropriate protection for Pages, Items and Application Items using built-ins

• Utilize Application Session Time-Outs• Build public page for users to land on when session expired• Set Maximum Session Length and Maximum Session Idle times

• Save State before Branching• Use Branch checkbox to save session state values prior to branching• Session state values will not be displayed in the Branch URL

• Saving sensitive Item values (e.g. SSN)• Use Item checkbox to store value encrypted in session state• Stores values encrypted in APEX session state table• For storing sensitive data in the database should encrypt the table columns

• Encrypting table columns completely independent of APEX

Presenter
Presentation Notes
Discussion Points: For more information please refer to the APEX Application Builder User’s Guide – Chapter 13: Managing Application Security – Understanding Developer Security Best Practices (http://download.oracle.com/docs/cd/E14373_01/appdev.32/e11838/sec.htm#CCHEGCHF)
Page 45: Apex Overview

<Insert Picture Here>

Oracle Application Express Customer Surveys / Profiles

Page 46: Apex Overview

© 2009 Oracle Corporation

Customer Surveys

Presenter
Presentation Notes
Discussion Points: Surveys regularly conducted on APEX OTN Forum.
Page 47: Apex Overview

Oracle APEX Customer ProfilesModernization of Legacy Applications

• Paetec Software Corp• 20 year old application – Converted from Omni Software

• Required Web capabilities

• Engineers skilled in PL/SQL and no Web experience

• Large UK based ISV • Currently converting 5,000 Oracle Forms

• Required Web 2.0 capabilities to be competitive

• Very extensive re-use of existing Database objects

Integrated Solutions• InterVarsity Christian Fellowship/USA

• Integrated with eBusiness Suite

• Roman Incorporated• Integrated with ERP and used on Handhelds

• Harvard Pilgrim Health Care• Online application for individuals integrated with existing system for employees

© 2009 Oracle Corporation

Page 48: Apex Overview

Oracle APEX Customer ProfilesReporting Applications

• Oracle Audit Vault 10.2.3• Replaced 100’s of individual reports with 30 Interactive Reports

• Iron Mountain • Monitor over 60 databases from one application

• Evaluate disc usage and predict future requirements

Targeted Solutions• PGA Golf

• Tournament purse management and payment system

• BMW / Oracle Racing• Provide analytics on data obtained from yacht sensors

• AskTom• Tom Kyte’s highly popular discussion forum

• CERN• Training & safety registration applications

© 2009 Oracle Corporation

Page 49: Apex Overview

Oracle APEX Customer ProfilesDepartmental Applications

• Deutsche Telecom• Physical stores sales tracking application

• WaMu• Standard corporate development tool

• US Army• Property planning and inventory management system

Consolidation Projects• Telstra

• 18,000 Access Applications causing major network load

• Banned Access and consolidated into APEX

• Tennessee Department of Environment & Conservation• Power users trained in APEX (no IT required)

• Consolidating spreadsheets and Access into Oracle

• Lansing Community College• Microsoft Access and Microsoft Excel consolidation

© 2009 Oracle Corporation

Page 50: Apex Overview

Oracle APEX Customer ProfilesCommercial Applications

• Paetec – Pinnacle Communications Management Suite• Integrated Service Lifecycle Management (SLM) application

• Available licensed, hosted, or managed

• Insum• Association Management - Software as a Service (SaaS)

• Neoface• CRM for the SMB market

Internet Applications• ProMED-Mail

• Rapid global dissemination of information on outbreaks of infectious diseases and acute exposures to toxins that affect human health

• Utah Department of Transport (UDOT)• Content management application and the public facing application

• endlichferien GbR• High traffic portal to connect vacationers with cottage owners, travel agencies, etc.

© 2009 Oracle Corporation

Page 51: Apex Overview

<Insert Picture Here>

Oracle Application Express Summary

Page 52: Apex Overview

© 2009 Oracle Corporation

Oracle APEX Roadmap• APEX 3.1.2

• Introduced Interactive Reports• Basis for Audit Vault Reporting

• APEX 3.2 – Latest Production Release

• Forms Conversion• Enhanced Security features

• APEX 4.0• Websheets• Oracle APEX Listener• Improved Tabular Forms• Dynamic Actions

Download from OTN

Presenter
Presentation Notes
Discussion Points: 3.1.2 built into Oracle Audit Vault 10.2.3 as their complete reporting solution. Instead of hundreds of static reports AV team developed small number of Interactive Reports and allow customers to customize the information. Audit Vault useful to APEX development team as helped prove the functionality and scalability provided with Interactive Reports. 3.2 introduced Forms Conversion. Even if not interested in converting from Oracle Forms to APEX should still upgrade ASAP due to the many enhanced security features 4.0 currently scheduled for end of calendar year 2009 – Statement of Direction provides latest list of planned features
Page 53: Apex Overview

© 2009 Oracle Corporation

Latest APEX Features• Forms Conversion [3.2] – Enables the loading of Oracle Forms source into an Oracle Application Express project and generate an initial APEX application.

•Interactive Reports [3.1] – An innovative new technology that allows end users to customize reports. By putting more power in the hands of users it reduces development time and effort while simultaneously enhancing application functionality.

•Web Services Integration [3.1] – Ability to easily integrate with services through either built-in Web service support or through lower level PL/SQL UTL_HTTP package calls.

• Optional Runtime-Only Deployment [3.1] – Ability to install just a runtime APEX environment via SQL scripts for production environments, minimizing installed footprint and increasing security.

• PDF Printing [3.0] – Integrate with Report Server (Oracle BI Publisher, Apache FOP, or XSL-FO) to produce PDF, XLS, HTML outputs. Can define multiple report queries and load custom RTF or XSL-FO templates.

• Flash Charts [3.0] – Create professional charts using Adobe Flash

• MS Access Migration [3.0] – Use SQL Developer Migration Workshop to migrate the Access schema and data. Then migrate the Access Forms, Reports and Queries using APEX to generate a first-cut design

Presenter
Presentation Notes
Discussion Points: For further details refer to relevant OTN pages Forms Conversion - http://www.oracle.com/technology/products/database/application_express/html/apex_for_forms.html Interactive Reports - http://www.oracle.com/technology/products/database/application_express/html/irrs.html Web Services - http://www.oracle.com/technology/products/database/application_express/packaged_apps/integration.html Other 3.1 Features - http://www.oracle.com/technology/products/database/application_express/html/3.1_new_features.html PDF Printing - http://www.oracle.com/technology/products/database/application_express/html/configure_printing.html Other 3.0 features - http://www.oracle.com/technology/products/database/application_express/html/3.0_new_features.html Access Migration - http://www.oracle.com/technology/tech/migration//workbench/index_sqldev_omwb.html
Page 54: Apex Overview

© 2009 Oracle Corporation

Oracle Application Express

• Oracle 11g differentiator (Application Development framework)

• Large and Rapidly growing APEX community• Dominating Oracle RAD development (Fast and easy)• Capitalizes on SQL and PL/SQL knowledge and popularity• Driving legacy conversion / consolidation• Web 2.0 capabilities – Interactive Reports, Flash, AJAX• Empowering technology – Scalable, Integrated and Secure• Integration – EBS, CRM On-Demand, etc.

Presenter
Presentation Notes
Discussion Points: APEX is a unique tool that is positioned squarely at the RAD developers who need to build departmental / targetted applications very quickly. .NET is designed for teams of university trained enterprise developers for building large enterprise-class heterogeneous applications. Microsoft and IBM don’t have any competing tools that combine the ease of development with the full capabilities of the database including scalability, reliability, security, etc. The community very strongly supports APEX through the OTN Forum and presenting at Oracle conferences (http://apex.oracle.com/pls/otn/f?p=59652:1:0). Given that APEX is a “no-cost” feature of the Oracle DB, the tool gets very limited marketing budget, however, the popularity within the community is growing rapidly through word-of-mouth and the productivity / capabilities it delivers. The number of consulting companies and commercial applications built around APEX is also growing rapidly. There is a very large pool of developers with extensive experience and skill writing SQL and PL/SQL. These are the primary languages for building APEX applications so maximizes their existing knowledge. The many typical use cases, especially relating to converting legacy applications and consolidation, demonstrate the flexibility of APEX and power of providing an extensible framework based on the Oracle DB and PL/SQL. APEX provides Web 2.0 features out-of-the-box, such as Interactive Reports, Flash Charts, etc., but can also be extended with Javascript, JS Libraries and AJAX to incorporate more Web 2.0 capabilities. Because APEX resides within the Oracle DB it inherits all the strengths of the DB in relation to scalability, security, reliability, etc. and can take advantage of all other DB features (Oracle Text, Mapping, OLAP, RAC, Partitioning, etc.). APEX also provides multiple administration capabilities, including multi-tenant hosting, to minimizing the administrative overheads. APEX has proven to be very successful being integrated with off-the-shelf commercial applications to enhance the functionality of those applications. Integration can be accomplished by directly installing APEX into the same Oracle DB, using Oracle DB Links, or via Web Services
Page 55: Apex Overview

© 2009 Oracle Corporation

• Only good for Excel / Access replacement• Successfully used to meet a large variety of use cases from small to very large, from simple to

very complex

• Simple architecture won’t scale• Single tier architecture results in fewer network traversals and CPU cycles per page request• Takes full advantage of Oracle Database capabilities and features as built 100% inside database• Proven by countless customer success stories and sites like ARIA, AskTom, ThinkQuest

• APEX is not here to stay• APEX 3.2 represents the 8th major release since 2004• Integrated into Oracle 11gR1 Seed Database (Part of the core database as a standard feature)• Oracle increasingly relies on APEX for internal applications to improve business processes

• It’s free so it can’t be …• Oracle provides APEX, SQL Developer, etc. at no-cost to encourage development in Oracle

Technologies and increase utilization of the Oracle Database• Dedicated APEX Oracle Support team available as part of standard Oracle Database license

• Oracle will charge for APEX in the future• Oracle has no plans to charge for APEX• No precedent exists for Oracle charging for a database feature that is currently “no-cost”

Oracle Application Express FUD

Presenter
Presentation Notes
Discussion Points: These are some of the misconceptions that are often propagated to try and discredit APEX. Scalability - For each page request / submission there is a maximum of 1 Database round trip APEX Meta data is defined directly in DB tables and utilizes PL/SQL , concurrency, monitoring and administration, etc. ARIA is Oracle’s most used internet application with a peak load of over 30,000 page requests / hour running on a single server AskTom is a very popular and highly available internet site www.thinkquest.org has over one million users running on an Oracle RAC environment
Page 56: Apex Overview

© 2009 Oracle Corporation

Next Steps

Information:http://otn.oracle.com/apex

Hosted Development:http://apex.oracle.com

Presenter
Presentation Notes
Discussion Points: OTN page invaluable resource often updated with additional content Hosted development provides free “development only” site for kicking the tires
Page 57: Apex Overview

© 2009 Oracle Corporation

Page 58: Apex Overview

© 2009 Oracle Corporation