Hi Muhammed
This is the way you do in forms and reports

1) You create roles password protected.
create role prueba identified by test;
2) Assign it to your users disabled.
GRANT prueba TO CTB
/
ALTER USER CTB DEFAULT ROLE ALL EXCEPT prueba
/
3) Then you enabled it in the application
In forms
DBMS_SESSION.SET_ROLE( 'prueba identified by test') );
On reports
  there is a role_name property in your report
4) If you don't have an encrypter transmission, you can enable the
role on a package in a logon procedure