Security, roles, and licensing

Control who can use what—and prove it

Simor ERP combines operational access control with deployment-level licensing so administrators can manage users, modules, permissions, and subscription rules consistently.

The operational challenge

Why teams look for a better system

Hiding a menu is not security. Organizations need backend enforcement, clear user status, role-based access, and a licensing model that works even for controlled or offline customer deployments.

Simor Soft solution

Simor ERP restricts modules at both interface and API layers, supports users and roles, and verifies a signed customer license using a vendor-held private key and an application-embedded public key

Core capabilities

What the solution covers

Capabilities are connected through shared data, permissions, traceability, and reporting—not presented as isolated feature checklists.

  • Users, roles, status, and menu permissions
  • Module restriction in both UI and backend API
  • Signed offline customer licence files
  • Expiry, deployment ID, and active-user limits
  • Enabled modules and read-only or locked states
  • License installation and blocked-request audit
How it works

A workflow your team can follow

The vendor signs a customer-specific license containing identity, deployment, expiry, user limit, and module entitlements. The deployed application verifies the signature with its public key and enforces the result in navigation and protected backend endpoints.

Outcome

Consistent access control across the application

Outcome

No private signing key deployed to customers

Outcome

Clear enforcement of licensed modules and users

Outcome

Audit evidence for license and blocked-access events

Customization

Adapt the system without losing control

Roles, permission sets, module bundles, deployment policies, audit reports, lock states, and customer-specific entitlement models can be configured without weakening the signature boundary.

Discovery, design, implementation, testing, data migration, deployment, training, and ongoing enhancement can be delivered as one managed engagement.

A practical next step

See how this would work in your organization

We can walk through the live product and discuss configuration, customization, migration, integration, and deployment.