Roles and access

The four levels

• Client - a simple portal. Size a system, keep the report, change their own password. Nothing else.
• Installer / EPC - the complete sizing toolset, the product catalogue, the CRM, and their own empanelment file.
• Engineer - the complete toolset, without the backend settings.
• Administrator - everything, including the engine constants, branding, reference data, the audit log and user accounts.

Installers only ever see their own work

An installer sees the contacts, sizings and tasks they created, and no one else's. This is enforced on the database query, not by hiding buttons: the counts on the dashboard, the search results, the pipeline board and the record pages all run through the same restriction, so there is no route to another installer's data.

An installer also sees only their own empanelment record and their own uploaded documents. They cannot list other empanelled companies, and cannot download another company's files.

What installers deliberately cannot do

Change engine constants, manage the product catalogue, review other companies' empanelment applications, or see the audit log. Everything else in the app is theirs to use.

Logs

Every login, failed login, password change, record change and document download is written to an append-only audit trail with the actor, the time, the address and what changed. Passwords never reach it. Administrators read it under Settings -> Activity log, and it is pruned to its retention window automatically.