DSDillon / Business applications
Plan Client Portal Permissions and Document Access
A client portal needs permission checks on records and files. Hiding a menu item does not restrict access to its underlying address.
Map the organization and engagement
A client organization can have several contacts and projects. Define the roles that may view, upload, approve, download or manage another contact. Shared engagements need an explicit boundary.
List private staff notes separately from client comments. A client changing employer or leaving a project needs an access removal process.
Check access at the file request
A shared link may be forwarded. The download request must check current permission or use the approved limited sharing mechanism. Link expiry, revocation and retention are part of the design.
Exports, previews, search results and notification messages must respect the same boundary. Sensitive titles and summaries can disclose information even when the file itself is blocked.
Interactive example / sample records
One project, different views.
The client sees shared project records.
This illustration runs in your browser with fixed sample data. It has no live booking, document processing or customer account connection.
Use accounts with different permissions
Try a direct document address, an archived project, a revoked invitation and a client assigned to another organization. Record the expected result for each role.
The proposal should identify authentication, recovery, file storage and audit requirements. Access is a core workflow that needs testing alongside the visible screens.
Project questions
Can clients invite colleagues?
That can be enabled for an authorized role with the agreed organization boundary and approval rules.
Can a portal show invoices without exposing internal notes?
Yes. The client view uses an explicit set of permitted fields and checks the current account access.
DSDillon / Buyer guide / Updated 26 September 2026
Start with the business problem
Tell us what needs to change.
Bring the current process, the software you use and the result you need. We will work through the scope, connections and delivery requirements.
