EMSS and LS9

With LS Security a user has nothing by default whereas LAUA security gives everything by default. So theoretically as long as your Security Classes and Roles are defined well then there shouldn't be an issue giving the Search Bar.

I agree with your statement entirely, I guess I would like to know how others are approaching creating the roles and classes for EMSS.

well true and not true...for EMSS to run access to certain forms are mandatory but with the search bar there if the user knows the form then they will have access...it is important to train the users...if your EMSS roles are the only roles that you user has then the search bar is not needed and you can further secure their access by not allowing access to certain bookmarks...

The issue seems to be with the users that do use lawson applications and have access to the search bar. Is the best option to go through and write rules to allow/disallow appropriate access on each form and file required for the ESS role to ensure they can't transfer to say HR11.1 and see/modify any inappropriate data? Is there a better way?

you could create bookmarks that allow access to the forms that are needed and remove the search bar...but I don't know of a way to secure the form if access is granted other than there being some forms you can't go directly to, but HR11 is not one of them...or based on a unique attribute you could allow or disallow access on the form itself...try using the isElementGrpAccessible and grant Inquiry access only on the HR system code...based on the company and employee number...