This isn’t a question; just the results of some brute-force testing I did because territory security was driving me crazy. In particular, we had a user who did not have permission to view the quote she had created, even though View all Territories was checked for her work force record.
The reason for this is that Epicor’s “negative” security kicks in before its “positive” security.
The user in question is a customer service rep who sets up quotes and orders. Our CSRs are not salespeople on any territory, nor are they authorized users on the salespeople workforce accounts. Each rep is his/her own work force with View all Territories checked.
However… this particular user is also an authorized user of a work force record that does NOT have View all Territories checked. (It’s a work force record used in case management and does not need access to sales stuff).
So… the “negative” permission of the case management work force record (no access to all territories) kicked in and prevented her from seeing the quote, even though her own work force would allow her to see it. When I removed access to the other work force, she could see the customer account (and quote).
Hope this is helpful to someone.