I’ve created access groups and given the access groups the areas within Epicor that they need (not a fun process but I’ve managed) but I’ve since noticed that everyone that has been put into an access group now cant use the quick launch screen. How do I reactive it?
That means, even though there are a dozen other Part Tracker menus in the system… only people who have access to Sales Management, CRM, General Operations menu folder can use that widget.
It is a HUGE pain.
You will have to individually retarget everybody’s widgets to menus THEY have permissions to get to.
If they’re screens you want EVERYBODY to have access to, you could consider copying the menu to a new location with open permissions… then set the widgets to that menu path across the board.
I went with the ‘create my own menu for most screens’, then everyone has access to that menu group and the individual screens are then restricted by user/group. You have to go into the context menu settings and repoint to that new item as well (in addition to redoing the home page links to match them) but it is a band-aid that works to fix what Epicor broke.
I understand the why behind the change but yeah, its a nightmare given that some screens exist in pretty much every menu structure and the security is tied to a specific menu id so if they don’t have sales management, if that is where the context link for part tracker goes, no part tracker for you even though they have it from production…
You have to edit the homepage (I think you actually create a new one IIRC) and then on each of those tiles select Edit and repoint them to a menu item the particular user has access to.
Security applies in such a way that just because they have Part Tracker from the Production Management > Job Management > General they do not necessarily have it through Sales > Order > General, if any point in structure chain is not available to them (They have access to Sales Management but NOT to Order Management then no amount of allow on anything that lives under OM will give them access to it.) they will not be able to open the screen.
From there you publish the layout and if you want you can go into the individual users setup page and assign them a default layout (your new layout you just published).
Just wanted to provide an image to build on what @leonardpothier stated… Part Tracker is a good example because there are many.
See in the image below that if you create a widget for Part Tracker, you have to select a Part Tracker with a menu path to which that specific user has access.
How do i stop users from being able to use the Part Entry on the left mouse click, I don’t know what Part Entry screen its going to. But I thought I had disabled that screen.
You need to find the menu that the Context Menu is using, look in Context Menu Maintenance, in this case you are likely looking for Part.PartNum Context ID. Inside that record will be a list of menu items that can be called when you right click on a part number. Find the entry for Part Entry and the Process ID will correspond to the Menu ID that it is actually calling. From there you go to Menu Maintenance and find what Security ID is tied to that screen (or the folder structure) and then go to Menu Security Maintenance on that Security ID and make changes to it.
As noted above, some screens appear in many places and each of those could have their own security so you have to go through them all to ensure you have blocked/allowed what you want.
In Menu Maintenance if you select All it will let you search and you can enter the Menu ID and it will bring up that one that you can go into and see the values for Security ID.
Alternatively you can dig through the Main Menu category, that looks like it would live in the Material Management > Inventory Management > Setup area.