← Back to the ShowcaseSecurity
Users and permissions
Secure sign-in, profiles and fine-grained access control by module, page and operation — ready on day one.
- JWT authentication with refresh and configurable account lockout
- Permission tree: module → page → operation
- Reusable profiles with granular grants
- Demoting an administrator revokes their sessions immediately
Tailored access
Each profile sees only the modules and pages it is entitled to, and within each page the operations (view, create, edit, delete, export) are granted one by one. The menu, the screens and the API all follow the same source of truth.
Security that does not rely on discipline
Password policy, lockout after failed attempts, mandatory change on first sign-in and an audit trail are on from the start. The team does not have to remember to protect things — the base protects by default.