User group Permissions

[LeoC (Leonardo Colombo)]

Hi all!
I created a Security Group.
I then assigned in Menù Maintenance the only two menus that the group can see (Quote Entry and Order Tracker).

When I open Epicor with a User that is in that group I can only see those two menus in the homepage.
The problem is that when I enter for example ‘Quote Entry’ if I right-click the Customer I can access the Customer Maintenance from there.
Same thing happening for ‘Part Maintenance’ and so on…

This need to be impossible to do it, how can I block it?
Thanks!

[Asz0ka (Adam Szoka)]

You do it in Menu Maintenance still. If you go into customization mode, then do the right click / open with, it should tell you the menu item you want to change the security on.

[chaddb (Chadd Blanchard)]

You will need to add that new security group to the disallow access for any program they shouldn’t have access to. You can do this in Menu Maintenance or with DMT.

[chaddb (Chadd Blanchard)]

Take a look at @ckrusen comment on your post from last week. If you follow those steps it will block their access to the programs from the Open In/With.

Make sure you didn’t just add the disallow at the top level. You have to add it to all security IDs. Adding only to the top level won’t block their access.

Users with access to only two menus

I’d do the following: Make a SecGroup QE_OT (Quote Entry / Order Tracker) Make the user a member of that group Create a new top level menu folder [image] Create a new SecID [image] Back on the Detail tab, change the Security ID to the one you just made [image] In the new folder, ad a menu item for Quote Entry , selecting SEC_QE_OT as the Sec ID. Repeat #6 for the Order Tracker entry At this point, the new top level menu folder “Quote Entry / Order Tracker” will only show for users of th…

[LeoC (Leonardo Colombo)]

Sorry i’m facing difficulties to understand what you wrote. Can you elaborate please?

[LeoC (Leonardo Colombo)]

Hi!
I disallowed access on every menu item except on the ‘Quote Entry’ and ‘Order Tracker’.
I can see only those two menus but from there I can access other menus.

I don’t want this to happen

[LeoC (Leonardo Colombo)]

Oh ok I must select ‘Disallow’ on the lower menus and not only on the top.
I will try it, thanks!

[chaddb (Chadd Blanchard)]

You don’t need to go into customization for this. Can all be done just from Menu Maintenance or with DMT.

[chaddb (Chadd Blanchard)]

@LeoC

Oh ok I must select ‘Disallow’ on the lower menus and not only on the top.

Correct. You have to add the group to the disallow on all sub-menu items. Anything with a different security ID. All the programs under the top level have their own security ID.

[Asz0ka (Adam Szoka)]

I was just saying that you could use customization mode to help find the menu ID, but you’re right it’s not necessary.

[chaddb (Chadd Blanchard)]

Oh, I gotcha. Was confused what you were saying. Didn’t think of getting the menu ID that way. But you’re right. You could get it that way.

[LeoC (Leonardo Colombo)]

Ok so I created the menus for the Group.

Now can I do a BAQ and form ‘ICE.Menu’, get all the security IDs (2720 in my case)
and do a DMT for all of the IDs I found in the query?
(obvs with the ‘DisallowAccess’ column with my SecurityGroupCode in) ?

Like ‘SEC159’ (Part), ‘SEC160’ (ShipVia) and so on…

EDIT:
I’m trying to do the BPM but I can’t understand why it won’t find the SecCode i throw in…