Role-Based Access Control & Platform Governance
Enterprise security engineered from the ground up. Enforce granular capability matrices across HTTP routes and UI controls, mandate TOTP two-factor authentication, audit activity logs, and administer multi-tenant organisations.
Broad Admin Over-Privileging
In typical tools, sales reps are given broad administrator rights just to edit email templates, allowing accidental deletions of critical mailboxes or unauthorized exports of the entire prospect database.
Cosmetic Security Illusion
Many applications merely hide buttons from non-admin users in CSS, while leaving the backend API endpoint completely unguarded against simple curl requests. SiSender enforces checks on every route.
Multi-Tenant Governance Chaos
Managing multiple customer organisations or internal subsidiaries without a centralized platform console makes applying schema migrations and monitoring cross-tenant delivery rates impossible.
How SiSender Enforces Enterprise RBAC
Capability Ticks
Permissions are defined by granular module capabilities (campaigns.create, mailboxes.connect, prospects.import, etc.) rather than generic, blunt user tiers.
Route Filter Enforcement
Every request passes through CodeIgniter 4's outreachRole:permission filter before a controller method or database model can be invoked.
Pre-Paint DOM Stripping
Controls and buttons that an operator's role cannot use are stripped from the DOM before first paint, eliminating broken button clicks and permission error popups.
Platform Super-Admin
Super-admins operate from the root platform console, monitoring health metrics, enforcing package quotas, and executing database migrations across all tenants.
Role Permission Matrix Console
Exact rebuild of engage_deploy_CHG0107/app/Views/roles/index.php displaying granular module permissions and user allocations.
Roles & Permissions
| Role · Classification | Permission Modules | Assigned Users | Actions |
|---|---|---|---|
|
Administrator Built-in Full Admin
Unrestricted governance over mailboxes, campaigns, users and billing
|
Campaigns 7
Mailboxes 6
Leads 8
Pipeline 4
Users & Roles 7
|
2 | |
|
Outreach Campaign Manager
Sequence authoring, prospect import, mailbox limits and reply management
|
Campaigns 6
Leads 6
Replies 3
Pipeline 4
|
4 | |
|
Sales Development Representative (SDR)
Handles inbound replies, works pipeline deals and resolves follow-up SLA tasks
|
Pipeline 3
Replies 2
Tasks 2
Campaigns View only
|
8 | |
|
Executive Auditor Built-in
Read-only oversight across telemetry, deliverability reports and audit logs
|
Dashboard View
Campaigns View
Audit Logs View
|
1 |
Cross-Tenant Organisation Registry
Exact rebuild of engage_deploy_CHG0107/app/Views/super/index.php showing cross-tenant quotas and package governance.
Platform Administration
| Organisation · Domain | Status | Subscription Package | User Seats | Mailboxes | Sent (24h) | Open Rate (30d) |
|---|---|---|---|---|---|---|
|
Halden & Rowe Holdings Ltd
haldenrowe.co.uk · Tenant ID:
org_4b8f01 |
Active | Enterprise Tier (£299/mo) | 15 / 25 | 12 / 20 | 1,420 | 48.2% |
|
Verity Health Group UK
verityhealth.co.uk · Tenant ID:
org_8812c4 |
Active | Growth Tier (£149/mo) | 8 / 10 | 8 / 10 | 840 | 44.1% |
|
Northbridge Logistics Ltd
northbridgelogistics.co.uk · Tenant ID:
org_e39a51 |
Active | Enterprise Tier (£299/mo) | 12 / 25 | 10 / 20 | 1,180 | 41.8% |
|
Nordic Capital Partners
nordiccapital.example.com · Tenant ID:
org_17a80b |
Active | Starter Tier (£79/mo) | 4 / 5 | 4 / 5 | 380 | 52.4% |
Governance & Security Capabilities Ledger
| Capability | Implementation Details | Status | Code Reference |
|---|---|---|---|
| Route-Level Role Filters | Filters in Config/Routes.php reject unauthorized HTTP requests with HTTP 403 before controllers run. |
COMPLETE | OutreachRoles.php |
| TOTP Two-Factor Authentication | Standard RFC 6238 time-based OTP challenge with backup recovery codes for account access. | COMPLETE | MfaController.php |
| Tamper-Evident Activity Logs | Records user IDs, client IP addresses, action timestamps, and modified entity identifiers. | COMPLETE | LogController.php |
| Tenant Quota Enforcement | Super-admin console enforces caps on maximum mailboxes, active users, and monthly sends per org. | COMPLETE | SuperAdminController::setLimits |