모든 파일에 감사 로그가 남는 보안 고객 포털

Build a secure client portal for my firm.

Create a shared database with four tables: clients (client name, contact email, engagement status of Active, Paused or Ended, account manager), portal users (linked to a client, name, email, client role of Client admin or Bookkeeper, access status of Active or Revoked, last sign-in), documents (linked to a client, title, file attachment, document type of Contract, Invoice, Report, Payroll or Internal note, uploaded by, which client roles may view it) and access log (linked to a document and a user, action of Viewed, Downloaded, Edited, Shared, Permission changed or Denied, timestamp, IP address).

Give every portal user their own login. They must only ever see documents where the client record is their own client, and never documents typed Payroll or Internal note. Give my team two internal roles: staff, who upload and edit documents for their assigned clients, and admin, who can also invite portal users, change document-type permissions and revoke access.

Build a client document view, an internal access review view listing every portal user with their client, role and access status, and an audit view filterable by user, document and date range.

When an engagement ends, set that client's portal users to Revoked so they cannot sign in or open anything, and keep their access log history intact.