A Web- Based Student Attendance Management System Using MERN Stack with Role-Based Access Control

The primary business model of bespoke tailoring remains largely manual and offline, limiting its operating efficiency and access to market opportunities. This research details the Stitchify system, an innovative electronic solution based on the MERN(MongoDB, Express.js, React.js, Node.js) platform to connect method artisans with contemporary buyers. Stitchify follows a robust three-tier architecture to provide for various types of users that include: consumers requiring custom clothing, tailors managing custom order production capacity, and couriers responsible for managing the delivery of garments. Functionalities include scheduling of measurement sessions and scheduling of doorsteps for collection and delivery of fabric samples, tracking of orders in real time, secure payment processing, and role based access control. Load testing indicates that the system will perform well under high concurrent load; during load tests, users received responses to requests within 250ms even when 100 users were connected at the same time. Volunteer participants tested the platform's usability by completing tasks on it without previous training, and their average task completion time was less than three minutes which shows that the interface is easy to use. Along with its technical benefits, this study addresses socioeconomic difficulties experienced by sole proprietor tailoring. Professionalism is advancing with digital infrastructures that offer access to new markets, lowering the cost of entry. The research confirms the validity of the on-demand service model for craft-based businesses, as well as the measurable improvements in business transparency, business capacity, and customer satisfaction for small tailoring businesses. Keywords: Digital Transformation; MERN Stack; Bespoke Tailoring; On-Demand Services; Full-Stack Web Development; Hyperlocal Commerce; Mobile Devices; Digitization of Services.

Role based access control (RBAC) is a powerful security administration concept that can simplify permission assignment management. Migration to and maintenance of RBAC requires role engineering, the identification of a set of roles that offer administrative benefit. However, establishing that RBAC is desirable in a given enterprise is lacking in current role engineering processes. To help identify the practical need for RBAC, we propose RoleVAT, a Role engineering tool for the Visual Assessment of user and permission Tendencies. User and permission clusters can be visually identified as potential user groups or roles. The benefit and impact of this visual analysis in enterprise environments is discussed and demonstrated through testing on real life as well as synthetic datasets. Our experimental results show the effectiveness of RoleVAT as well as interesting user and role tendencies in real enterprise environments.

Online communities are virtual spaces for users to share interests, support others, and to exchange knowledge and information. Understanding user behavior is valuable to organizations and has applications from marketing to security, for instance, identifying leaders within a community or predicting future behavior. In the present research, we seek to understand the various roles that users adopt in online communities–for instance, who leads the conversation? Who are the supporters? We examine user role changes over time and the pathways that users follow. This allows us to explore the differences between users who progress to leadership positions and users who fail to develop influence. We also reflect on how user role proportions impact the overall health of the community. Here, we examine two online ideological communities, RevLeft and Islamic Awakening (N = 1631; N = 849), and provide a novel approach to identify various types of users. Finally, we study user role trajectories over time and identify community “leaders” from meta-data alone. Study One examined both communities using K-MEANS cluster analysis of behavioral meta-data, which revealed seven user roles. We then mapped these roles against Preece and Schneiderman’s (2009) Reader-to-Leader Framework (RtLF). Both communities aligned with the RtLF, where most users were “contributors”, many were “collaborators”, and few were “leaders”. Study Two looked at one community over a two-year period and found that, despite a high churn rate of users, roles were stable over time. We built a model of user role transitions over the two years. This can be used to predict user role changes in the future, which will have implications for community managers and security focused contexts (e.g., analyzing behavioral meta-data from forums and websites known to be associated with illicit activity).

Since Role-Based Access Control (RBAC) shows great advantage in meeting the security need in large-scale and enterprise-wide system, RBAC becomes the hot topic in access control research field. However, current approaches to access control are mostly based on individual user identity; hence they do not scale to distributed systems. So, the paper analyses RBAC could not satisfy dynamic access control in distributed environment, and puts forward an dynamic access control model based on roles and trust control, giving every trust value for each user by introducing trust management to access control, each role corresponds a certain trust vale, users and systems give values for each other after operation, trust management modesties and updates trust values, users roles will change accordingly, The experiment shows that the model is much validated, and something useful is obtained. The extended model can meet the need to manage and enforce the strong and efficient access control technology in large-scale environments. The flexility and broad application of the proposed model through the system is testified and something useful is obtained.

Access control policies of XML documents are often specified based on user roles and data content of the documents. Content-based authorization is crucial for providing fine-grained access control to data in XML document. Since authorization rules (authorizations, for short) use path expressions of XPath for locating data in documents, authorization definition is related to structure of the document. However, the structure of XML documents tends to change by various reasons such as application extension and information exchange between organizations. Therefore, authorizations must be revised whenever they become incompatible with a new structure of the document. As far as we know, no previous work has discussed the problem of transforming content-based authorizations for XML documents by using schema mapping information. We define classes for schema and document transformations that allow transforming authorizations without access to source and target XML documents. We propose an algorithm that computes authorizations of role-based access control (RBAC) model for a target DTD instance from given RBAC authorizations of a source DTD instance and schema mapping information under the specified classes of schema and document transformations while preserving the authorization policy of the source DTD instance.

Role-based access control (RBAC) is the most predominant access control model in today's security management due to its ability to simplify authorization, and flexibility to specify and enforce protection policies. In RBAC, Separation of Duty (SoD) constrains user role authorization to protect sensitive information from frauds due to conflicts of interests. SoD constraints are commonly defined by mutually exclusive roles (MER) (e.g., bank teller and auditor). This paper proposes practical computational techniques for analyzing SoD by integrating workflows of the enterprise processes into the RBAC framework. Specifically, we present 1) an algorithm for generating MER to enforce SoD, and 2) a verification algorithm to check if a given RBAC state (role authorization and user-role assignments) satisfies a given type of SoD constraint or not. The paper discusses the details of the approach and illustrates its use in a loan application domain.

Access control is generally a rule or procedure that allows, denies, restricts or limit access to system's resources. It may, as well, monitor and record all attempts made to access a system. Access Control may also identify users attempting to access unauthorized resources. It is a mechanism which is very much important for protection in computer security. Various access control models are in use, including the most common Mandatory Access Control (MAC), Discretionary Access Control (DAC) and Role Based Access Control (RBAC). All these models are known as identity based access control models. In all these access control models, user (subjects) and resources (objects) are identified by unique names. Identification may be done directly or through roles assigned to the subjects. These access control methods are effective in unchangeable distributed system, where there are only a set of Users with a known set of services. For this reason, we propose a framework which is well suited to many situations in cloud computing where users or applications can be clearly separated according to their job functions. In this chapter, we proposes a role based access control framework with various features including security of sensitive data, authorization policy and secure data from hackers. Our proposed role based access control algorithm provides tailored and fine level of user access control services without adding complexity, and supports access privileges updates dynamically when a user's role is added or updated.

In today's dynamic networking environment, securing access to resources has become increasingly challenging due to the growth and progress of connected devices. This study explores the integration of Role-Based Access Control (RBAC) and OAuth 2.0 protocols to enhance network access management and security enforcement in an Android mobile application. The study adopts a waterfall methodology to implement access control mechanisms that govern authentication and authorization. OAuth 2.0, a widely adopted open-standard authorization framework, was implemented to secure user authentication by allowing third-party access without exposing user credentials. Meanwhile, RBAC was leveraged to streamline access permissions based on predefined user roles, ensuring that access privileges are granted according to hierarchical role structures. The main outcomes of this study show significance towards the improvements in security enforcement and user access management. Specifically, the implementation of multi-factor authentication, session timeout mechanisms, and user role-based authorization ensured robust protection of sensitive data while maintaining system usability. RBAC proved effective in controlling access to various system resources, such as database operations which was presented in scenario of physical access to doors, while OAuth 2.0 provided a secure communication channel for authentication events. These protocols, working in tandem, addressed key issues like unauthorized access, data integrity, and scalability in network security policy enforcement. This research deduces that combining RBAC and OAuth 2.0 protocols in mobile applications enhances security posture, simplifies access management, and mitigates evolving threats.

The Institution Placement Data Management System is a comprehensive, web-based application designed to streamline and automate the entire campus recruitment process in academic institutions. The system acts as a centralized platform facilitating seamless interaction between students, placement officers, and recruiters. It empowers students to register, maintain detailed profiles, track eligibility, and apply for placement drives, while providing admins with robust tools to post job opportunities, manage student applications, filter candidates based on criteria, and schedule interviews or aptitude tests. The platform ensures secure and differentiated access using Role-Based Access Control (RBAC), enabling precise control over functionalities based on user roles such as student, admin, and recruiter. Students receive real-time notifications and alerts regarding new job postings, application status, and interview schedules, thus enhancing transparency and engagement. Developed using the MERN stack (MongoDB, Express.js, React.js, Node.js) with MySQL as the primary data storage solution for handling relational data, the system leverages modern web technologies to ensure a responsive, intuitive, and scalable user experience. The system incorporates data validation, search and filter functionalities, profile edit history, and analytics dashboards for placement statistics and drive performance. By automating manual processes and offering structured data management, the system significantly reduces administrative overhead, eliminates redundancies, and ensures efficient placement coordination.

Most of valuable information resources for all organizations are stored in database. It's a serious subject to protect this information against intruders. However, conventional security mechanisms haven't been designed to detect anomalous actions of database users. Intrusion detection systems (IDS) deliver an extra layer of security that cannot be guaranteed by built-in security tools. IDS provide the ideal solution to defend databases from intruders. In this paper, we suggest an anomaly detection approach that summarizes the raw transactional SQL queries into compact data structure called hexplet, which can model normal database access behavior (abstract the user's role profile) and recognize impostors specifically tailored for role-based access control (RBAC) database system. This hexplet allows us to preserve the correlation among SQL statements in the same transaction by exploiting the information in the transaction-log entry. Our target is to improve detection accuracy, specially the detection of those intruders inside the organization who behave strange behavior. Our model utilizes Naive Bayes Classifier (NBC) as a simple technique for evaluating the legitimacy of transaction. Experimental results show the performance of the proposed model in the term of error equal rate.

We studied the evolution of an online innovation community and users' interaction behavior through social network analysis to explore how to build an innovation community and get a better understanding about the role of participating users and their innovative content. Throughout our analysis we explicitly recognize that the primary desired outcome of an online innovation community is the generation of innovation and breakthrough ideas and therefore simultaneously consider the user itself as well as the user generated ideas. Through relying on structural data combined with consideration of the context of our community we were able to identify eight different user types, who have different importance in supporting the health and success of the community.

In this paper, an architecture of remote laboratory for the college of optoelectronic engineering is proposed. Any university which wants to establish distance education for the college of optoelectronic engineering can use the proposed architecture or hardware and software to manage experimental assignments from any location. There are four main parts of the proposed remote laboratory: remote users, internet, server Setup and laboratory setup. Remote users can use desktop, laptop, tablet or mobile to conduct the experiments remotely. Roles of different types of remote users have also expalined in this paper. A reliable and secure server is considered to implement the system. List of reliability and security issues cosidered to design the system is also mentioned here. Laboratories like 3D Digitization and Modeling lab, 3D Imaging and Metrology of Micro Objects lab, Face/Person Tracking lab, Optical Communications and Networks lab, Visible Light Communication lab, Lab on Laser Technologies, Lab on Infrared Technologies, Lab on Lightings and Displays, Lab on Biophotonics etc will be connected under the main server. At present, the proposed architecture is implemented at Shenzhen University; and 3D Imaging and Metrology of Micro Objects lab is connected to the main server to conduct experiment remotely which is recently tested from the University of Stuttgart, German. The outputs generated from remote users are also described in this paper. The proposed system can be used from website http://210.39.14.102.

In order to solve the access control problems of network management system in development, This paper presents a role-based multi-granularity access control program, this program implements logical separation between user and access rights, you can customize roles for different user according to their needs, making network management system more flexible and secure in the user management; the program has put fine-grained control of the roles into practice and solve the problem of regional resources access control.

Operations in the aviation domain routinely require coordination and dynamic information exchange with multiple organizations. These organizations may be government, commercial, or private. In today's heightened information security environment, communication between disparate organizations is often facilitated through the use of credentialing mechanisms and technologies. This short paper discusses some of the prototyping and demonstration efforts that have been performed to investigate and inform credentialing in the aviation domain.

- — Administrative workflows in educational institutions continue to rely heavily on paper-based procedures, causing significant delays, inconsistencies, and resource wastage. This paper introduces EduForms, an intelligent, web-based institutional forms management platform built on the MERN stack — MongoDB, Express.js, React.js, and Node.js. The platform eliminates manual intervention through a combination of automated multi-level approval chains, role-based access control across eight distinct user roles, and intelligent AI-assisted form discovery. A Two-Factor Authentication mechanism utilizing One-Time Passwords enhances login security. An embedded AI assistant called EduBot allows users to locate appropriate forms through natural language interaction, while a universal voice-based form-fill module enables field population through spoken input — supporting all form types and fields. A smart approval automation engine evaluates submissions against predefined rules and automatically approves routine requests, while a priority-based routing mechanism escalates urgent applications directly to higher authorities. A predictive analytics widget presents approval probability estimates derived from historical submission data. The system supports forty-nine form templates spanning eight role-specific portals and includes a contextual feedback mechanism and a comprehensive exam branch management portal. Experimental evaluation confirms measurable reductions in processing time, improved submission accuracy, and a substantially enhanced user experience compared to conventional manual systems. Keywords: MERN Stack, Intelligent Form Management, Two-Factor Authentication, AI-Assisted Workflow, Voice Form Fill, Priority-Based Routing, Smart Approval Automation, Real-Time Tracking, Role-Based Access Control