| 🔐 Authentication |
Login/register/token refresh/logout |
Click captcha + JWT + blacklist |
|
Account lockout |
Locked for 15 minutes after 5 failures |
|
Concurrent session limit |
Max 3 valid tokens per user |
| 📊 Dashboard |
Business overview/sales board/inventory board/finance board |
Redis cache for 5 minutes |
| 👥 User management |
CRUD + batch delete/enable/disable |
Soft delete + password re-confirmation |
|
Excel bulk import |
Row-by-row validation + error report |
| 🔒 Roles and permissions |
Role CRUD + permission tree |
RBAC with method.path granular authorization |
| ⚙ System config |
Key-value CRUD |
Grouped management |
| 📋 Operation audit |
Log query + source client detection |
Automatic detection of 8 platforms |
| 📁 File management |
Upload/Excel export/PDF export |
Automatic masking of sensitive data |
| 🛡 Security protection |
18 layers of defense in depth |
XSS/SQL injection/path traversal/command injection/CSRF/rate limiting/CSP… |
| 🏥 Operations |
Health check/metrics/API docs/security.txt |
Prometheus + OpenAPI 3.0 |
| 📦 Product management |
Product records/SKU/multi-spec/multi-unit/category/brand/price strategy |
Multi-level category tree + multi-unit conversion |
|
Warehouse locations |
Multi-warehouse, multi-location management |
|
Supplier/customer records |
Contacts/bank accounts/credit limit |
| 📥 Purchasing |
Requisition → order → receipt → return → settlement |
Complete purchasing flow + approval |
| 📤 Sales |
Quotation → order → delivery → return → settlement |
Quotation-to-order + sales gross margin |
| 🏗 Inventory |
Real-time stock/batches/serial numbers/transfers/stocktakes/alerts |
Moving weighted average costing |
| 💰 Finance |
AR/AP/receipts and payments/day journal/expense reimbursement/income statement/fixed assets/tax/multi-currency/budget/cost and profit centers |
Auto-generated AR/AP + write-off + comprehensive financial management |
| 🤝 CRM |
Customers/contacts/follow-up records/campaigns/service tickets/analytics reports/sales funnel/public pool/quotations/contracts |
Full customer lifecycle management |
| ✅ Approval workflow |
Workflow definition/submit for approval/approve/reject/withdraw/my approvals |
Multi-node approval process engine |
| 🔔 Notifications |
Notification list/read marking/unread count/mark all as read |
Real-time message push with status tracking |
| 📐 Project management |
Projects/tasks/timesheets |
Project progress tracking and resource management |
| 👤 HR |
Departments/employees/positions/attendance/leave/payroll |
Comprehensive HR management |
| 🏭 Manufacturing |
BOM/production orders/routings/workstations/MRP |
Material requirements planning and production execution |
| 📈 Custom reports |
Report templates/datasets/fields/filters/execution/scheduled jobs |
Visual report builder |
