Who can do what, what leaves a trace, what connects.
Facts rather than badges: how permissions, approvals and audit work in the product, and which outside systems it talks to.
The server enforces permissions
Permissions are set per resource and action and enforced on the server. A hidden button is not the boundary. Saving a role applies to everyone who holds it, right away.
- 26 ready-made role templates that you can copy.
- About 400 permissions in the catalogue.
- Extra permissions per user, and org-unit roles.
- A screen list per role decides what the menu shows.
Data restrictions and amount visibility
A user can be limited by warehouse, work center or sales channel. Sales price, purchase price and cost each take their own permission, and without it the amount stays hidden.
- The Roller column shows restrictions like “Kısıtlı: 2 depo · 1 iş merkezi”.
- A locked or disabled account is marked on the list.
- An invitation stays pending until accepted.
Segregation of duties
- A stock count difference takes a second signature.
- A quality decision is made by a different user than the one who received the goods.
- The person who opens a return request cannot approve it. The same goes for supplier return requests.
- The sender and the sales rep cannot approve their own quote.
- Risky role pairs raise a segregation warning. It informs and does not block.
Approval flows
Multi-stage, conditional on amount or discount, N approvals or M rejections, escalation to a higher role and delegation. Every round stays on the document.
Everything leaves a trace
İşlem Kayıtları keeps changes with the fields that changed. Erişim Günlüğü is kept for 2 years and stores no passwords. The stock ledger does not change, and posted documents are corrected by reversal.
Account protection
- Lock after failed attempts
- An account locks for 15 minutes after 5 failed attempts, and login is rate limited.
- Invitation and reset links
- An invitation link lasts 3 days, and a password reset link lasts 30 minutes.
- First login
- A password set by hand must be changed on first login.
- Session
- A session lasts 8 hours. Disabling a user ends login and session, while records stay.
e-Document passwords are stored encrypted and never shown again.
What it connects to
These are the connections built into the product. If you are looking for one that is not listed, ask us in a call.
e-Fatura, e-Arşiv, e-İrsaliye
Sent through a GİB special integrator. Incoming e-invoices and dispatch notes are fetched every 5 to 1440 minutes, every 15 by default. Export invoice series, basic and commercial scenarios, buyer accept and reject tracking, and an archive of documents issued elsewhere.
Your own contract, financial seal and credentials. Test and live are separate, it is off by default, and going live takes its own permission and a checklist.
Notifications, daily digest, invitations, password reset, documents by e-mail and carrier tender invitations, with a send queue and retries.
Your own SMTP: STARTTLS, SSL/TLS or plain relay.
Notifications
In-app bell, per-user preferences, ready-made alert templates with conditions such as amount and currency, and web push to the device.
On iPhone, push works only from the installed home-screen app.
Exchange rates
Central Bank of Turkey (TCMB) rates are fetched hourly by a background job, and can be entered by hand.
The job can be switched off.
Excel
.xlsx import and export, report export and bank statement formats under Ekstre Biçimleri.
PDF and printing
Document output as PDF, form templates, output determination, label sizes, bulk printing and bulk sending.
Barcode and QR
Bin QR labels on thermal or A4, product barcodes and serial labels. Reading works with handheld scanners and the camera.
Data import
14 objects load from .xlsx. A code that exists is updated, one that does not is created. A missing column changes nothing, and imports never delete. Stok Açılışı is a document, not an update.
Going live on e-documents
Items are checked under contract, data, test evidence and go-live. With a blocking item, going live stays closed. The state on screen is made up and represents a setup in the test environment.
License and scope
Modules and features are licensed, and Modül Yönetimi shows the scope. A feature works if the license covers it, the installation enabled it, and its module and dependencies are on. There are 59 feature keys, and switching off never deletes data.
An expired or suspended license becomes read-only. There is an active user limit. Let us discuss pricing and hosting in a call.
Let your security team ask their questions
We can go through the permission model, trails and connections with your technical team.