Hi, I'mNitish Kumar

Menu-, project- and button-level permissions built on top of the existing portal tables without changing them. One stored procedure (usp_RBAC_Manager) drives everything; Angular directives enforce it and an admin screen manages it.

The Approve / Reject control only renders for users holding the approver grant. Quantities are recomputed by SUM across approved releases, so repeated approvals never double-count.

Authenticates against the existing user and employee master with the portal's own encryption functions; refresh tokens live in a separate table so portal data is never modified.

Diagnosed slowness as network-bound rather than SQL-bound and applied response compression and connection-pool warm-up. GitHub Actions CI/CD, plus an Electron installer with bundled SQLite for offline use.

Interviewers receive a per-slot link; only a hash of the token is stored, links are validated on every visit and each submission is recorded against the invite with the caller's IP.

Creates the Teams meeting for the chosen slot through Microsoft Graph, with built-in diagnostics to verify the organiser account when integration misbehaves.

ASP.NET Identity with separate HR and IT areas, a global fallback policy requiring authentication, secure cookies in production, a distributed SQL-Server cache and central exception-handling middleware.

Core (domain, contracts, services), Infrastructure (repositories, EF Core) and UI (MVC) — one focused service class per use-case (getter / adder / updater / deleter / sorter) for testable business logic.

Endpoints are identified by a fingerprint built from BIOS, baseboard and network identifiers rather than a hostname. Device secrets are issued once, stored PBKDF2-hashed on the server and DPAPI-encrypted on the endpoint.

Portal users and device agents get separate JWT audiences, and a DeviceSelf policy guarantees an agent can only post as itself — cross-device calls return 403.

Services can't read Windows Location from session 0, so the agent installs a per-user scheduled task that captures a real GPS fix in the user session and hands it back; any non-satellite fix is rejected rather than guessed.

Caught and fixed an Active Directory email-lookup hang on non-domain machines (domain check plus a 5-second timeout). 20 automated tests on in-memory SQLite, and per-environment MSIs for dev, test and production.

Every table uses GUID primary keys and the insert procedures accept a client-generated ID, so records created offline never collide. Dotmim.Sync keeps SQLite and SQL Server in step, with server-wins conflict resolution.

No ORM: every database operation goes through a stored procedure with bound parameters. Layers are strictly separated (Domain → Application → Infrastructure → API) with a unified response envelope and FluentValidation.

The SR-CNN detector missed sustained plateau drops, so it is combined with a rolling-median baseline detector; forecasting uses SSA time-series with a moving-average fallback for short histories.

The Electron app runs a single local host that serves the UI and the API and runs the background sync engine, packaged as a branded Windows installer.