# Unified Login Suite v1.1.0 — Release Notes

**Release date:** 16 July 2026

## Delivered

- Added a central Unified User Portal for the three supplied PHP applications.
- Added the fixed Employee, Supervisor, Assistant Manager, Store Manager, Administrator and Super Administrator levels.
- Added per-user application assignment and per-function Inherit, Allow and Deny decisions.
- Added a configurable level-default matrix with forty-four complete business functions.
- Merged dependent implementation checks into usable function boxes rather than exposing unsafe partial permission combinations.
- Preserved local business records, historical foreign keys and branch/workflow relationships while removing local password authentication.
- Added a dry-run-first legacy importer that links profiles by central user ID and refuses ambiguous identities.

## Security changes

- Opaque central session tokens with only hashes stored in MySQL.
- Argon2id password hashing when available, bcrypt fallback, 14-character minimum and five-password history.
- Generic sign-in failures, timing equalisation, username/IP throttling and escalating account locks.
- Mandatory TOTP for Administrator and Super Administrator accounts, encrypted secrets, one-time recovery codes and TOTP replay prevention.
- Recent password-and-authenticator reauthentication for high-impact administration.
- CSRF on mutations, POST-only logout and central session revocation after security changes.
- Strict HTTPS, trusted registered redirect URLs, secure cookie modes and restrictive browser headers/CSP.
- Server-side permissions at page, route, action and sensitive service layers.
- Fail-closed central database/configuration behavior and collision-safe legacy identity linking.
- Atomic Staff JSON replacement, bounded imports, upload validation and script-execution denial in writable directories.
- Transaction/locking protection for Store Audit report revisions and Price Label review processing.

## Application versions

- Unified User Portal 1.1.0
- Staff Compliance Portal 1.3.0
- Store Audit System 1.1.0
- Price Label Maker 1.2.0

## Deployment note

Existing installations require coordinated backups, schema upgrades where applicable, code replacement while preserving business data, a reviewed legacy-user dry run and role-by-role acceptance testing. Follow `CPANEL_DEPLOYMENT.md`, `MIGRATION_GUIDE.md` and `ACCEPTANCE_CHECKLIST.md`.