Al Fath
A practice management system for an Abu Dhabi accounting and tax firm
Al Fath gives the firm a bilingual English and Arabic public website and a staff system for running its client work, built so the records can be trusted.
See Al Fath live
What I built
- Built the NestJS REST API on PostgreSQL with Prisma migrations.
- Added custom roles, per-module permissions and own-versus-all data scoping enforced in SQL.
- Added optimistic locking, so a stale edit gets a 409 instead of overwriting newer work.
- Recorded changes in a transactional field-level audit log.
- Hardened access with login rate limiting, strict origin checks and least-privilege database roles.
- Wrote 250+ Vitest tests, plus backup and restore scripts.