J.1 Server-side permissions & QR codes without rights

What it does

• Every page and every action checks the permission on the server by project, department and role; hidden buttons are only a convenience of the interface.
• A QR code only holds the project, type, reference and an HMAC signature – no password, token or data. Access is decided at every scan, and forged codes are rejected.
• Segregation of duties: IT administrators do not get QC approval rights; whoever reports production cannot approve QC; whoever records an installation cannot accept it; weld and packing list approvals are separate rights.