Software Engineering & Digital Products for Global Enterprises since 2006
CMMi Level 3SOC 2ISO 27001
View all services
Staff Augmentation
Embed senior engineers in your team within weeks.
Dedicated Teams
A ring-fenced squad with PM, leads, and engineers.
Build-Operate-Transfer
We hire, run, and transfer the team to you.
Contract-to-Hire
Try the talent. Convert when you're ready.
ForceHQ
Skill testing, interviews and ranking — powered by AI.
RoboRingo
Build, deploy and monitor voice agents without code.
MailGovern
Policy, retention and compliance for enterprise email.
Vishing
Test and train staff against AI-driven voice attacks.
CyberForceHQ
Continuous, adaptive security training for every team.
IDS Load Balancer
Built for Multi Instance InDesign Server, to distribute jobs.
AutoVAPT.ai
AI agent for continuous, automated vulnerability and penetration testing.
Salesforce + InDesign Connector
Bridge Salesforce data into InDesign to design print catalogues at scale.
HumanDISC
AI-powered behavioral assessments and DISC profiling for smarter hiring.
View all solutions
Banking, Financial Services & Insurance
Cloud, digital and legacy modernisation across financial entities.
Healthcare
Clinical platforms, patient engagement, and connected medical devices.
Pharma & Life Sciences
Trial systems, regulatory data, and field-force enablement.
Professional Services & Education
Workflow automation, learning platforms, and consulting tooling.
Media & Entertainment
AI video processing, OTT platforms, and content workflows.
Technology & SaaS
Product engineering, integrations, and scale for tech companies.
Retail & eCommerce
Shopify, print catalogues, web-to-print, and order automation.
View all industries
Blog
Engineering notes, opinions, and field reports.
Case Studies
How clients shipped — outcomes, stack, lessons.
White Papers
Deep-dives on AI, talent models, and platforms.
View all resources
About Us
Who we are, our story, and what drives us.
Co-Innovation
How we partner to build new products together.
Careers
Open roles and what it's like to work here.
News
Press, announcements, and industry updates.
Leadership
The people steering MetaDesign.
Locations
Gurugram, Brisbane, Detroit and beyond.
Contact Us
Talk to sales, hiring, or partnerships.
Request TalentStart a Project
Enterprise Application DevelopmentHealthcare / Pharmaceuticals

Granular Role Management & Mobile-First Manufacturing ERP

MetaDesign Solutions engineered a mobile-first ERP web application hosted on Supabase, utilizing advanced Row-Level Security (RLS) to achieve granular, module-level role management on the manufacturing floor.

Supabase · PostgreSQL · Auth
Client: Leading Pharmaceutical Manufacturing Company
Mobile-First Pharma ERP Platform via Supabase

Project Overview

The client was operating on a fragmented mix of outdated desktop applications and manual spreadsheet-based workflows. They needed a unified, cloud-based ERP system that floor workers could easily access via tablets on the manufacturing floor (necessitating a strict mobile-first approach). Most importantly, due to the highly regulated nature of pharmaceutical production, the system required extremely granular, module-level role management where specific workers could only view and edit the precise modules assigned to their security clearance level.

Managed Supabase Hosting

We hosted the entire backend on Supabase.com. We utilized Supabase's managed PostgreSQL database to construct complex relational data structures for inventory management, batch tracking, and quality assurance, benefiting from automated daily backups and high availability.

Granular RBAC via Row Level Security

The core of the security solution relied heavily on Supabase Row Level Security (RLS) and Custom Claims. We designed a dynamic Role-Based Access Control (RBAC) architecture where administrators could assign individual ERP modules (e.g., Mixing, Packaging, Quality Control) to specific user roles. We authored strict SQL RLS policies ensuring that even at the direct API level, users could only query data pertaining to their explicitly assigned modules.

Have a similar challenge?

Our experts can help you build custom integrations and plugins tailored to your business workflows.

Book a free consultation

Mobile-First Tablet UX

We built the frontend using React, TypeScript, and Tailwind CSS with a strict mobile-first methodology. The UI was optimized with large touch targets, high contrast, and simplified navigation flows, allowing manufacturing floor workers to easily interact with the ERP via tablets without removing their safety gloves.

Key Challenges

01

Challenge 1

Replacing 5 disparate legacy desktop and spreadsheet systems with a single, unified cloud platform.

02

Challenge 2

Designing a tablet-optimized, mobile-first UX for workers wearing PPE on the manufacturing floor.

03

Challenge 3

Implementing strict, FDA-compliant data isolation where users could only access data tied to their assigned production modules.

04

Challenge 4

Ensuring maximum uptime and automated data backups for mission-critical manufacturing workflows.

Results & Outcomes

The new ERP system successfully sunset 5 legacy systems, unifying the entire production workflow into a single, performant web application. The robust implementation of Postgres RLS achieved 100% compliance with internal data access regulations. Furthermore, the tablet-friendly mobile-first UI resulted in a 40% improvement in manufacturing floor efficiency, significantly reducing data entry errors and workflow bottlenecks.

5 to 1
Legacy Systems Replaced
100%
Compliance via RLS
40%
Floor Efficiency Lift
Mobile
Tablet-First UX
FAQ

Frequently Asked Questions

Common questions about this topic, answered by our engineering team.
Supabase is built on standard PostgreSQL, which is battle-tested, highly relational, and offers enterprise-grade data integrity. Features like Row Level Security allow us to enforce strict compliance and data isolation directly at the database layer, which is critical for FDA/cGMP environments.
Administrators define Roles and assign specific Modules to those Roles in the database. When a user authenticates via Supabase Auth, their assigned modules are injected as Custom JWT Claims or fetched via efficient join tables. Postgres RLS policies then mathematically evaluate these assignments before returning any rows.
Yes. Unlike NoSQL alternatives, Supabase's PostgreSQL foundation excels at complex relational mapping—such as tying raw material batches to intermediate mixtures, and finally to packaged SKUs—ensuring complete traceability without data duplication.
The backend is fully hosted on Supabase.com's managed infrastructure, providing automated daily backups, Point-in-Time Recovery (PITR), and scalable compute resources to guarantee maximum uptime for the manufacturing floor.
The frontend (built with React and Tailwind CSS) was designed from the ground up for tablet screens used on the factory floor. We prioritized large touch targets, offline-tolerant data fetching, and minimal-typing input fields (like barcode scanning integrations) to accommodate workers in protective gear.
Have a similar challenge?

Let's build your success story.

A 30-minute call with a principal engineer. We'll discuss your challenges, propose architecture, and outline a roadmap.

Talk to a strategist
Have a similar project? Let's discuss your requirements.
Book a call
EmailWhatsApp