Filter Car — Multi-tenant Operations
Car wash, servicing and spare parts for a network that is not one business but many — companies, the franchises under them and the branches under those, each seeing only what is theirs.
Built at Davinda. The unit of this system is not the user, it is the tenant. A company holds franchises, a franchise holds branches, and every row of data belongs somewhere in that tree.
Which makes authorisation the whole problem rather than a feature on the side. What a person may read, change, or even know exists is decided by where they sit in the hierarchy — not by a flat list of permissions bolted onto an account. Get that wrong in one query and a branch sees another company's takings.
Above that sits the operational side the business actually runs on: wash and service jobs, maintenance work, and a spare-parts inventory each branch keeps its own view of.
My part was the backend — the tenancy model, the roles and permissions, and the API.