Roles and access
Granular permissions per module: warehouse, work orders, accounting, settings. Warehouse staff can't see finances, accountants can't edit stock.
Security for an operational business
Built for multi-user operation: access rights, auditing, and transparency aren't an add-on — they're the foundation of the architecture.
RBAC
Roles and per-module permissions
100%
Company data isolation
Realtime
Activity log
Server
Checks in every API route
Фундамент, не дополнение
Права, аудит и изоляция данных встроены в архитектуру с первого дня эксплуатации.
Activity log
Every meaningful change is recorded with the employee, role, and timestamp. Managers see the full picture in Mission Control, no exports needed.
Company isolation
Multi-tenant architecture: each organization's data is isolated at the level of Firestore Security Rules and server-side checks.
Operation audits
A trail for stock, ledger entries, permissions, and documents: a transparent "who · what · when" chain, no "go ask Pete".
Защита на каждом слое
От входа пользователя до генерации PDF: контроль доступа на каждом этапе.
Authentication
Firebase Auth: email, Apple ID. Sessions are managed by the platform.
Data rules
Firestore rules restrict reads and writes by companyId and user role.
API routes
Server-side access checks before any operation on orders, stock, or finances.
Documents
PDFs and printing use one-time render tokens, with no public links to data.
Журнал активности
Пример записей, которые видит руководитель в Mission Control: кто, что, когда и в каком модуле.
Closed work order WO-2026-0142
Work OrdersWrote off G4KC-88421 from shelf A-12
WarehouseUpdated mileage on a vehicle record
FleetGranted the accounting role access to the "Operations" module
TeamПринципы
Least privilege by default
A role only grants access to the modules it needs. Expanding permissions goes through the owner or an admin, and is logged.
Transparency for managers
The owner sees who changed a stock count, closed a work order, or granted permissions, in the realtime activity log.
A production-ready stack
Firebase Authentication, Firestore Security Rules, and a server-only API that checks companyId and role on every request.
Контрольный список
Что проверяем при проектировании каждого модуля AutoCore.
- Data access only after authentication
- Every request is tied to a companyId
- RBAC is enforced on the server, not just in the UI
- A log of significant actions for managers
- Tenant data isolation in Firestore rules