oracle application express

<Insert Picture Here>

Oracle Application Express Rapid Application Development Tool

Proliferation of Departmental DatabasesInefficient, Ad-hoc Deployments

• Departments continuously create decentralized databases, such as MS Access, to solve tactical issues

• Need solutions NOW that they control• Often contain business critical data• Security, sharing, data accuracy, and

high availability are problematic• Costs are driven up as hundreds of

these systems are created

• Departments work against IT, not with IT

© 2009 Oracle Corporation – Proprietary

The APEX Consolidated ModelDecentralized Development, Centralized Management

• Consolidate departmental data and the application development service into Oracle Database 11g with Application Express (APEX)

• Oracle Database 11g ensures that APEX applications are secure, reliable and scalable

• Departments maintain full control over application development

• IT provides professional data management

• End user experience is dramatically improved


Oracle Application Express (APEX)Database-centric Web application development tool

• Unique Rapid Application Development (RAD) tool for the Oracle Database

• Browser based for Development, Deployment & Runtime

• Declaratively build professional Web 2.0 applications that are fast and secure

• Leverages full Oracle database capabilities and existing SQL & PL/SQL skills

• Fully supported, “no-cost” standard component with all editions of the Oracle Database

Easy - Rapid - Empowering


Design Develop

Deploy

APEX Rapid Application Development

Oracle Application Express Use Cases

Data-driven ApplicationsDevelop opportunistic and departmental productivity applications

Online ReportingBuild SQL-based reporting applications on existing database schemas

Access ReplacementConsolidate outgrown Access applications to the Oracle database with an APEX Web front end

Spreadsheet Web-ificationConvert spreadsheets to Web applications where they can be concurrently viewed and edited

Oracle Forms ModernizationLeverage SQL & PL/SQL declarative programming skills to move Forms applications to HTML / Web 2.0


© 2010 Oracle Corporation

• Developer community - 80k+ downloads / year

• apex.oracle.com – 4m page views / week

• Active Discussion Forum – 4.6 m views, #3 on OTN

•100 Consulting companies, 60 BLOGs, 10 Hosting Partners

• User Groups: 30 @OOW-09, 50 @ODTUG, APEXposed

• User interface for Oracle Store and Oracle Audit Vault

Oracle Application Express Momentum


Oracle Application Express Books


Community Focus

• Strong & Supportive Community• Popular OTN Discussion Forum• Consulting Companies• Blogs, SIGs• Commercial Applications• Internet Applications


2006 Application Express 2.2Packaged Applications

History

2006 Application Express 2.1Oracle XE

2005 HTML DB 2.0SQL Workshop

2004 HTML DB 1.6Themes

2004 HTML DB 1.5First Release

2007 Application Express 3.0Flash Charts, PDF Printing, Access Application Migration

2008 Application Express 3.1Interactive Reports, BLOB

2009 Application Express 3.2Forms Conversion

2010Application Express 4.0Websheets, Dynamic Actions, Plug-Ins, RESTful Web


Targets the Rapid Application Development Community


Out of the Box Development Features

Reports

Forms

Charts

Calendar

Templates

Navigation

Validations

Processes

Computations

Branches

Web Services

Email Services

Translation Services

Conditional Processing

Authentication

Authorization

Session State Management

Logging & Monitoring


Oracle Application Express

Architecture


Architectural Overview

• Integrated within the database 9iR2, 10g, 11g, XE

• Meta data driven

• Uses APEX Listener, Embedded Gateway or ModPLSQL


Multi-Tenant SaaS

• Single Oracle Database for multiple applications

• Provides virtual private databases

• Self-service or IT managed provisioning

Development / Deployment Options

• Locally• Install on Stand-alone machine

• Multi-tenant Private Cloud• Workspaces for each department• Self-service provisioning model

• Public Cloud• Hosting partners• Amazon EC2


Develop & deploy where it is most convenient and cost effective

Why APEX makes sense for the Cloud

• Very few moving parts – Simple to manage

• Browser based development / deployment / runtime

• No client-side dependencies

• Multi-Tenant SaaS provides multiple “workspaces”

• Applications easy to migrate to other deployments

• Database Backups also backup application source

• Oracle AMI includes APEX (may require upgrade)

• Webservice Support



Building Integrated Applications


Oracle APEX Listener• Java based • Alternative to mod_plsql • Certified against WebLogic, Oracle Glassfish, and OC4J• Extensible• File system caching *• FOP transformations to PDF *• Improved file upload *• Workload Capture *

* Requires APEX 4.0



Consolidation / Migrations / Conversions


MS Access to APEX MigrationDrivers

• Consolidation of departmental applications to centrally managed IT

• Some applications have grown and become mission critical

• Web unfriendly

• Platform dependent

• Poor security

• Limited scalability / excessive network traffic

Challenges

• Effort / business knowledge required to migrate

• Poor data model design

• No documentation


MS Access Migration- SQL Developer and Oracle APEX

• Export MS Access metadata • Migrate the Microsoft Access

database to Oracle • Create an Oracle Application

Express Workspace • Create a migration project • Analyze the Microsoft Access

application • Generate the Oracle Application

Express Application • Customize your Application

Express application


Oracle Forms to APEX ConversionDrivers

• Modernization of software / hardware

• Incorporate Web 2.0 capabilities

• Deliver greater user interactivity

• Utilize existing Database objects

• Can re-use existing IT developer skill-set

• Difficulty finding new Oracle Forms developers

Challenges

• Availability of IT application matter experts

• Conversion is non-trivial, requiring significant effort and resources

• APEX application will not look nor feel like Forms application


Oracle APEX Forms Conversion Overview


Load Oracle Forms Source

• Run Forms2XML Utility

• Create APEX Project

• Upload Source Files

Forms2XML Utility:• Available with Forms 9i & 10g• May convert Forms 4.x & 6i• If conversion fails will need to

manually upgrade first


Step 1: Identify Components to be Generated

• Browse Components• Blocks

• Select / Deselect

• Enhance SQL Query

• Items• Select / Deselect

• Review Prompts

• Annotate – Triggers, Program Units, Alerts, etc.

• Is it Applicable?

• Document post-generation requirements


Step 2: Automatically Generate Components

• Blocks• Form Interactive Report & Form

• Master / Detail

• Tabular Form

• Items• Date Pickers

• HTML Editors

• Checkboxes

• Radio Groups

• Select Lists

• Pop-up List of Values

• List of Values• Reports Interactive Reports

• Application Logic

• User Interface

• Annotate• Update Completion• Increases % complete


Step 3: Manual Post-Generation Tasks

Make same width as box below


Track Conversion Progress


Oracle Application ExpressSecurity


Authentication

• Out-of-the-Box Pre-Configured Schemes• LDAP Directory credentials• Oracle Application Server Single-Sign On• Open door credentials• Application Express accounts• Database Account credentials• No Authentication

• Custom Authentication• Customizable session management logic

• Use or modify (session verification function) built-in page sentry

• Develop custom sentry (examples provided)

• Credentials verification custom PL/SQL • Accepts user name and password; Returns Boolean

• Only executed once per session


Managing User Access

• Authorization• Pass / Fail checks – cached to improve performance• Can associate to any component (e.g. Application, page, button,

validation, item, etc.)• Various types (e.g. Exists, SQL Query, PL/SQL Function, etc.)

• Session State Protection• Prevent URL Tampering• Utilizes MD5 checksum

• Agnostically use Database Security Features• Fine Grained Access Control (aka VPD); Transparent Data

Encryption; Database Vault; Advanced Security Option; etc.• No APEX development effort required


Administrator Best Practices• Considerations with Embedded PL/SQL Gateway

• Uses XMLDB HTTP Protocol Listener – Part of the Database

• Not recommended for internet facing applications

• Configuring Oracle HTTP Server with mod_plsql

• Configured using Database Access Descriptors (DADs)

• Use PlsqlRequestValidationFunction to allow specified procedures

• Utilizing Secure Sockets Layer (SSL)

• Implemented using the HTTPS protocol – encrypts sent / received packets

• Prevents data from being sent over unprotected communication channel

• APEX Runtime-Only Environment

• Scripts provided to completely remove / re-install Application Builder

• Removes Web interface for administration and application development

• Setting Password Complexity Rules

• Can set multiple complexity rules / re-use rules across instance

• Using Session Timeout

• Set maximum session length and idle time for APEX developer log-ins


Developer Best Practices• Understand Items of type Password

• Don’t emit entered text to screen

• Should not save-state or should use Item encryption if saving to the DB

• Reports provided to identify at-risk Password items

• Using Zero as Session ID

• Critical for PUBLIC applications to ensure no cross-user contamination

• Session Id not included in application URL

• Cross-Site Scripting Protection

• Protect HTML Regions and other static areas• Use &ITEM. notation to reference session state variables• Select best Item types based on protection required

• Protect Dynamic Output• Explicitly use escape code when emitting session state

{e.g. htp.p(htf.escape_sc(v('SOME_ITEM'))); }• Protect Report Regions

• References in headings and messages escaped based on Item type


Developer Best Practices• Session State Protection

• Clear session state of unneeded values using Clear Cache built-ins• Enable Session State Protection to prevent URL tampering• Set appropriate protection for Pages, Items and Application Items using built-ins

• Utilize Application Session Time-Outs• Build public page for users to land on when session expired• Set Maximum Session Length and Maximum Session Idle times

• Save State before Branching

• Use Branch checkbox to save session state values prior to branching

• Session state values will not be displayed in the Branch URL

• Saving sensitive Item values (e.g. SSN)

• Use Item checkbox to store value encrypted in session state

• Stores values encrypted in APEX session state table

• For storing sensitive data in the database should encrypt the table columns

• Encrypting table columns completely independent of APEX



Integrated with SQL Developer


SQL Developer and Application Express

• Browse your Application Express Applications

• Manage Applications (Export / Import / Deploy / Drop)

• Modify Applications• Monitor / Tune your Queries• Remote Debugging• Included APEX Reports• Custom Exception Reports

Requires SQL Developer 1.2.1 +

and Application Express 3.0.1 +

Oracle SQL Developer

• Database Development IDE• Popular

• Most downloaded Oracle tool• 1.5m users• #1 Oracle database development IDE

• Distribution (No Cost)• With Database – All Editions• OTN download

• Benefits• Productivity• Ease of use

Introduced March 2006



Oracle SQL Developer Data Modelling

• New SQL Developer graphical data modelling supports• Designing logical Entity Relation Diagrams (ERD)• Building relational schema designs• Add physical database details• Generating and executing DDL scripts• Reverse engineering of existing data structures • Import of data models from Erwin and Designer

• Provides modelling for multiple databases• Oracle Database • DB2 (Mainframe & UDB) • SQL Server

• Supports • Multi-dimensional modelling (incl. cubes and spatial)• Multi-level logical and physical design environment• Model validation rules

Oracle Improving Developer Productivity

• Improving developer productivity over each phase of the database application development life cycle

• Improving developer productivity with new tools: SQL Developer, and Application Express

• Introducing database data modeling

* SQL Developer Data Modeling and SQL Developer Unit Testing not yet released



Oracle Application Express Customer Surveys / Profiles


Customer Surveys

Oracle APEX Customer ProfilesModernization of Legacy Applications

• Paetec Software Corp

• 20 year old application – Converted from Omni Software

• Required Web capabilities

• Engineers skilled in PL/SQL and no Web experience

• Large UK based ISV

• Currently converting 5,000 Oracle Forms

• Required Web 2.0 capabilities to be competitive

• Very extensive re-use of existing Database objects

Integrated Solutions

• InterVarsity Christian Fellowship/USA

• Integrated with eBusiness Suite

• Roman Incorporated

• Integrated with ERP and used on Handhelds

• Harvard Pilgrim Health Care

• Online application for individuals integrated with existing system for employees


Oracle APEX Customer ProfilesReporting Applications

• Oracle Audit Vault 10.2.3

• Replaced 100’s of individual reports with 30 Interactive Reports

• Iron Mountain

• Monitor over 60 databases from one application

• Evaluate disc usage and predict future requirements

Targeted Solutions

• PGA Golf

• Tournament purse management and payment system

• BMW / Oracle Racing

• Provide analytics on data obtained from yacht sensors

• AskTom

• Tom Kyte’s highly popular discussion forum

• CERN

• Training & safety registration applications


Oracle APEX Customer ProfilesDepartmental Applications

• Deutsche Telecom

• Physical stores sales tracking application

• WaMu

• Standard corporate development tool

• US Army

• Property planning and inventory management system

Consolidation Projects• Telstra

• 18,000 Access Applications causing major network load

• Banned Access and consolidated into APEX

• Tennessee Department of Environment & Conservation

• Power users trained in APEX (no IT required)

• Consolidating spreadsheets and Access into Oracle

• Lansing Community College

• Microsoft Access and Microsoft Excel consolidation


Oracle APEX Customer ProfilesCommercial Applications

• Paetec – Pinnacle Communications Management Suite

• Integrated Service Lifecycle Management (SLM) application

• Available licensed, hosted, or managed

• Insum

• Association Management - Software as a Service (SaaS)

• Neoface

• CRM for the SMB market

Internet Applications• ProMED-Mail

• Rapid global dissemination of information on outbreaks of infectious diseases and acute exposures to toxins that affect human health

• Utah Department of Transport (UDOT)

• Content management application and the public facing application

• endlichferien GbR

• High traffic portal to connect vacationers with cottage owners, travel agencies, etc.



Oracle Application Express Summary


Oracle APEX Roadmap

• APEX 3.1• Introduced Interactive Reports• Basis for Audit Vault Reporting

• APEX 3.2 • Forms Conversion• Enhanced Security features

• APEX 4.0• Websheets• Dynamic Actions• Plug-Ins• RESTful Web Services• Improved Themes

Download from OTN



• Oracle 11g differentiator (Application Development framework)

• Large and Rapidly growing APEX community

• Dominating Oracle RAD development (Fast and easy)

• Capitalizes on SQL and PL/SQL knowledge and popularity

• Driving legacy conversion / consolidation

• Web 2.0 capabilities – Interactive Reports, Flash, Dynamic Actions, Plug-Ins

• Empowering technology – Scalable, Integrated and Secure

• Integration – EBS, CRM On-Demand, etc.


• Only good for Excel / Access replacement

• Successfully used to meet a large variety of use cases from small to very large, from simple to very complex

• Simple architecture won’t scale

• Single tier architecture results in fewer network traversals and CPU cycles per page request

• Takes full advantage of Oracle Database capabilities and features as built 100% inside database

• Proven by countless customer success stories and sites like ARIA, AskTom, ThinkQuest

• APEX is not here to stay

• APEX 4.0 represents the 9th major release since 2004

• Integrated into Oracle 11gR1 Seed Database (Part of the core database as a standard feature)

• Oracle increasingly relies on APEX for internal applications to improve business processes

• It’s free so it can’t be …

• Oracle provides APEX, SQL Developer, etc. at no-cost to encourage development in Oracle Technologies and increase utilization of the Oracle Database

• Dedicated APEX Oracle Support team available as part of standard Oracle Database license

• Oracle will charge for APEX in the future

• Oracle has no plans to charge for APEX

• No precedent exists for Oracle charging for a database feature that is currently “no-cost”

Oracle Application Express FUD


Oracle Technology Network (OTN)

• Download latest Release• Getting Started• Documentation & Tutorials

• Hosted Environment• Oracle By Examples• Community & Partners


Next Steps

Information:

http://otn.oracle.com/apex

Hosted Development:

http://apex.oracle.com

oracle application express

Documents

oracle store

oracle corporationout

oracle corporationtargets

oracle corporationhistory

oracle glassfish

oracle databasebrowser

oracle corporationwhy

oracle database capabilities