Multi-tenant roles and permissions for Coinsure
Custom roles, granular permissions and audit logs to unlock enterprise deals. A case study by Alex Morgan, Senior Full-Stack Developer.
Challenge
Coinsure, an insurance comparison site, had only "admin" and "member" roles. Three enterprise deals were stuck because customers needed custom roles, approval rules and audit logs.
Solution
I designed a permission model with predefined and custom roles, enforced it in the API layer and the UI, and added an exportable audit log for every sensitive action.