Tax1 Response PDF

I appreciate your efforts in providing the document discussing concerns and issues related to our web application. We want to address each of the points raised and share how we intend to address them. Below is our detailed response: 1. Unauthorized Access Risk: At this stage, our web a...

I appreciate your efforts in providing the document discussing concerns and issues related to our web application. We want to address each of the points raised and share how we intend to address them. Below is our detailed response: 1. Unauthorized Access Risk: At this stage, our web application is not fully completed, and as such, we haven't implemented the authentication and authorization for every user role on the front end side. (Other panels only have the UI) After the full implementation of these user role functionalities, users will not be able to navigate to sections of the application meant for different roles. We assure you that these authorization checks are deemed essential and will be in place as we move forward with completing other tasks. 2. Authentication Management: The backend is responsible for managing the access of data to different user roles and maintaining secure user sessions. This backend implementation is currently being handled by your development team. We are only integrating the APIs on the front-end side. 3. Navigation Control: Presently, navigation across user portals is possible because the authentication flow for each user role is not fully completed. This will be resolved once authentication for each role is implemented, thus preventing unauthorized navigation and access to specific web pages with or without authentication. 4. Technical Limitations: As with authentication management, most of the issues related to API routing checks, performance impact, authentication verification, and session management are managed on the backend. Your development team is working on these aspects to ensure security and efficient performance. 5. User Experience Issues: We have separate user portals for each user type, as planned in the design phase. If there are any suggestions or changes you wish to discuss regarding user experience, we welcome an opportunity for further dialogue to collaboratively design enhancements. 6. Impact Without Solution: As mentioned, the current issues stem from incomplete implementations, some linked to backend responsibilities. We are committed to addressing these vulnerabilities and ensuring a smooth and secure user experience once development progresses. Additionally, we acknowledge the implementation guide you shared. Our team possesses the requisite experience to integrate and protect different routes, manage access policies, and ensure proper navigation across different portals. Your suggestions are greatly valued, and we look forward to any custom implementations you may wish to discuss further. In conclusion, we welcome any specific features or customization you have in mind for further improvement. Please reach out to us for any detailed discussions.