Security, data storage and audit

Protect supplier job evidence

Restrict job photos, notes, invoices and payment details.

Audience: CRM staffPermission: Authorised staff/supplierModule v1.0.0
Exact navigationMaintenance & Jobs / Supplier Portal
Before you begin
  • Use an account with Authorised staff/supplier and confirm the intended record or setting before making a change.
  • Follow the exact route above. If the screen or action is absent, check module activation, ownership and permissions rather than using another person’s account.
  • Use controlled test data for configuration, integration, email, AI, payment, portal or automation changes before production-wide use.

What this guide covers

Restrict job photos, notes, invoices and payment details. The instructions reflect the supplied module’s registered menus, controller actions, views, settings and code-backed validation flow.

Exact step-by-step process

  1. Open Maintenance & Jobs / Supplier Portal.
  2. Select the exact record or option described in this guide.
  3. Complete the displayed fields or action using the rules below.
  4. Save or submit once and resolve any validation response.
  5. Verify the resulting record, status, file, notification or integration effect.

Fields, choices and supported possibilities

Exact actionProtect supplier job evidence
Exact navigationMaintenance & Jobs / Supplier Portal
Module version1.0.0
Access ruleAuthorised staff/supplier
VerificationReopen the source record and confirm the expected status, linked record, file, notification, portal visibility or financial effect.
Maintenance requestProperty, tenant, subject/issue, priority, status, supplier, assignee, cost and administrative note.
Supplier work orderJob title/description, property/manual address, allocated amount, supplier notes, photos and completion evidence.
Financial linkSupplier invoice status, amount/final amount, payment mode, transaction ID and payment comments.

Code-backed validations and workflow rules

  • Supplier portal must remain scoped to assigned jobs.
  • Maintenance hub visibility is tied to customer-view access in the registered menu.
  • Supplier completion can create a Pending supplier invoice when one does not already exist.

Expected result and verification

  • The supported protect supplier job evidence flow completes without bypassing permission or validation checks.
  • The resulting record, setting, status, file, delivery event or external response is visible from the relevant workspace.
  • Unexpected validation, provider or linked-record errors are investigated before retrying.

Security, privacy and operational checks

  • Apply least privilege to purchasing, vendor, invoice, payment, return, contract and report permissions.
  • Verify vendor identity, bank/payment details, tax, currency, totals and approvals before creating financial commitments.
  • Treat public links, signatures, portal files, attachments and exported reports as controlled business records.
  • Test settings and automated jobs with controlled records before production-wide use.