Portal permissions
Checks that portal roles cannot access actions outside their assigned scope.
A creator platform for article requests, editorial publishing and earnings workflows, with separate admin, creator, writer and agent portals.
Production surfaces and workflows, without unverified performance claims.
The platform needed reliable publishing and finance workflows across several role-specific portals, with permissions that stay scoped and a public API used by independently deployed websites.
Built a Laravel 12 backend with a versioned API, an Inertia + React dashboard, role-scoped permissions and realtime updates. The marketing site and content sites deploy separately and consume the platform through its API.
Representative cases from the project repositories; no coverage totals claimed.
Checks that portal roles cannot access actions outside their assigned scope.
Covers request lifecycle transitions and the authorization rules around them.
Checks withdrawal handling and that reconciliation totals match dashboard families.
Verifies requests resolve to the intended site context before application logic runs.