Hi Muhammed This is the way you do in forms and reports
1) You create roles password protected. create role prueba identified by test; 2) Assign it to your users disabled. GRANT prueba TO CTB / ALTER USER CTB DEFAULT ROLE ALL EXCEPT prueba / 3) Then you enabled it in the application In forms DBMS_SESSION.SET_ROLE( 'prueba identified by test') ); On reports there is a role_name property in your report 4) If you don't have an encrypter transmission, you can enable the role on a package in a logon procedure -- //www.freelists.org/webpage/oracle-l