Identity and access

Who it is for. A product where the wrong person can see a record, or where login is a special case on every screen.

What we build. Sign-in, roles, and a rule for what each role may touch, including the admin.

How the work goes. We list the roles from the real jobs, then hide every record that job does not need. A session ends when it should.

What you leave with. A person sees their work. Nothing else.