Advanced Security & Multi-Company Governance

Security architecture manual detailing role-based access control (RBAC), row-level record rules, sensitive field encryption, multi-company data partitioning under Company 1, and audit logging.

• Enterprise Security and Governance Architecture Overview

  Overview of SmartERP's defense-in-depth security model, ISO 27001 principles, role-based access control, and multi-company data isolation.

• Role-Based Access Control (RBAC) and Model ACLs

  Designing security group hierarchies, configuring ir.model.access.csv files, and granting granular Create, Read, Write, and Unlink (CRUD) permissions.

• Row-Level Security and Dynamic Record Rules

  Implementing ir.rule domain filters to partition records by department, branch, assigned salesperson, and confidentiality flags.

• Multi-Company Partitioning and Legal Entity Governance

  Architectural rules for multi-company isolation under Company 1 (Ashewa Technology Solutions S.C.), inter-company transactions, and boundary governance.

• Field-Level Encryption and Sensitive PII Protection

  Encrypting confidential payroll, bank, and medical data at rest using AES-GCM, PII tokenization, and dynamic field masking.

• Audit Logging and Tamper-Evident Revision Trails

  Configuring audit trails for critical model mutations, tracking field-level before/after values, user timestamps, and IP addresses.

• Two-Factor Authentication (2FA) and Session Governance

  Enforcing mandatory Time-Based One-Time Password (TOTP) 2FA, session timeout limits, brute-force lockouts, and password policies.

• Database Hardening, Edge Blocking, and Network Security

  PostgreSQL security hardening, TLS/SSL encryption, edge proxy blocking of database enumeration endpoints, and Docker network isolation.

• Security Compliance Protocols and Penetration Testing

  Conducting periodic vulnerability scans, static application security testing (SAST), penetration testing, and ISO 27001 audit protocols.

• Troubleshooting Security, ACL, and Record Rule Failures

  Diagnostic guide for debugging 'Access Rights Error', conflicting group memberships, record rule domain evaluation, and 2FA recovery.