Somebody should mark this as the solution, seems like its not obvious?
1 Like
Hardly a viable solution though is it, having to go into each tile and repair something that was working prior to the upgrade to 2022.2.8 especially when you don’t want your users messing around with things like that,
I agree you shouldn’t have to mess with it, but those shortcuts on the Home screen
are for the user to do with what they please, by design.
If you had a user switch to a different department going from Production to Purchasing, you would change the security groups tasking them out of Production and adding them to Purchasing. They could in theory now have a Button for Job Tracker which was located under Production stop working, when the fix it by editing the button and searching again for Job Tracker they could pickup access thru their new department say for example Purchasing.
The whole menu and security system is a poor design.
I really wish they would have taken the opportunity to redo it with the UI change.
I do understand the complexity it would entail to try to maintain both though,
I wouldn’t want to do it 
If anyone is interested this changes also affects MES. I have opened an Epicor Idea on it since support told me it is working as designed.
I was originally looking on this site to see if anyone found a way around for the time being. Process Calling didn’t seem to work, but maybe I entered it wrong. Does anyone know if that works using Kinetic UI?
Here is a link to the idea if you could vote, but here is also what was included for those searching this site. 2022.2 Homepage security causes a total menu security change for MES
=============================================
As stated by Epicor support, there was a security change to harden security by requiring the end user to have access to the entire menu structure that leads to the menu item in question in 2022.2 whereas in 2022.1 the user only needed access to the menuID of the menu item in question. In making that change, they revoked MES (Data Collect) screen access.
For a basic user to open any of the trackers, they now need access to the entire tree down to the menu item. This is dependent on which menuID the MES button points to. One example: MES Part Tracker opens menuID OMGO3004, I had to give the user access to Sales Management (SEC464) then Order Management (SEC044) then General Operations (SEC049) then Part Tracker (SEC183). This is the case for all trackers in MES if the user doesn’t happen to have the whole menu structure.
Since many of the base menus are structured to allow based on access above, this would give many employees access to Order Entry or other sales functions that they should not. The only way around that would be to go to every menu item and set individual security. Cloud customers would also have the added benefit of being required to copy every menu to the current company.
Epicor should have pointed those MES buttons to a process menu to have individual security or to an Executive Analysis menu as to not give excessive security out. Stop trying to tie a bunch of screens and options to a single security ID. I noticed many of the EVA skills tied to the Part Tracker security ID as well. These should all have their own ID.
As a side note, they could do the same for the trackers on the default homepage in the smart client/Web instead of making everyone modify the homepage. It probably would have been better to just have trackers on the default homepage pointing to Executive Analysis and remove entry screens for security.
Most of MES is rendered useless until we modify security. Reverting to Classic doesn’t sound like a good idea now that they are all used to Kinetic. I would also prefer not to customize the MES screen just to fix a security issue.
1 Like
Here is the Process Calling I was trying, but the Call From is Invalid to Epicor, but is what is in the process menu. I assume this is not working for Kinetic.
Aren’t all the trackers under Executive Analysis> Trackers? So you can just give them access to that one path (and then whichever trackers you specifically want them to access)?
Edit: Oh I see you mentioned that, what a pain to have to either customize all the buttons or change all the security!
I was focused on the main trackers for the manufacturing floor, but after a bit more testing, this applies to Entry screens as well. For Example Maintenance Job Entry, which the security filter does make sense for this as someone who can get into the entry screens should have access to it on tree. Trackers do not make sense to me.
Hi Jeff,
We upgraded this past weekend to 2022.2.11. I’ve got a user having a similar problem accessing Part Tracker, which everyone has access to. We are not using Kinetic though. We are still on the Modern/Classic version of Epicor. Could this be causing that same problem?
Thanks,
Randy
Yeah, potentially. That’s interesting though because I’ve only seen this exhibit with the kinetic dashboard. It is possible since you can customize the items. See if there’s a way to create a new shortcut to that tracker replacing the old one if that fixes the problem.
The commonality is that this does tend to happen after minor upgrades. I think it’s part of their new security model they’re moving toward
Otherwise I’d contact support.
Yes, as both Classic and Kinetic UIs use the menu security/groups the same way.
I just discovered that we have this problem with MES/Data Collection. So, do we have to grant access to specific users rather than just selecting “Allow Access to All Groups/Users”? Part Tracker has always been set up to allow access to all but we’re getting the error message that Due to Security settings the process is unavailable.
Has anyone come up with a solution to MES Part Tracker as our users have just started using the Kinetic MES and cannot open Part Tracker due to this issue. I am expecting there will be others now that they are using Kinetic.
I had to create a new button and map it to the Part Tracker menu item under Executive Analysis > Trackers, since everyone has access to that in our environment. You can’t change a native control, so I moved it off the visible area and made my own new button. Same with Job Tracker.
@timshuwy is Epicor considering pointing the MES tracker buttons to EA-Trackers? This really needs to be done and done ASAP rather than everyone having to add custom buttons. We cannot give all our users access to Sales Management >Order Management > General Operations.
Debbie, were you able to do this in the Smart Client before? I know that some applications may NOT be allowed to be added to the MES screens due to licensing requirements… this is because the MES license is a less expensive option, and only supports a limited set of applications. for example, you cannot launch Sales Order Entry from the MES menu due to license issues.
If it worked in the smart client, but not from a browser, then this should be submitted to support for review.
1 Like
Tim - In the Smart Client Classic MES our users were able to access Part Tracker without having access to Sales Management >Order Management > General Operations. We have just started using Kinetic MES in the Smart Client as we are not using the browser yet.
Based on Adam Johnson’s post further up in this stream…As stated by Epicor support, there was a security change to harden security by requiring the end user to have access to the entire menu structure that leads to the menu item in question in 2022.2 whereas in 2022.1 the user only needed access to the menuID of the menu item in question. In making that change, they revoked MES (Data Collect) screen access.
2 Likes
I think this is a bad idea. I think they need a section for MES. EA folder in my opinion should be restricted by default, not open.
1 Like
@klincecum your suggestion of having an MES folder would work too. I just need a solution where I don’t have to create custom buttons in MES or give the users access to Sales Management >Order Management > General Operations.
1 Like