SakhtBazar: Custom Enterprise CRM

Project Overview

SakhtBazar is an established B2B construction marketplace connecting thousands of building material suppliers with contractors and property developers. To support expanding operational demands, the organization needed a tailored, high-productivity internal CRM platform to replace disparate spreadsheet workflows. As a full-stack engineer on the project, I architected the frontend application using React and Ant Design while engineering secure, performant RESTful APIs and role-based permissions in Laravel.

The Challenge: High Operational Complexity & Enterprise Security

Operating a national commercial marketplace requires dependable operational tooling behind the scenes:

• Diverse operational workflows: The internal team needed a unified workspace spanning B2B lead pipelines, supplier verification dossiers, customer support ticketing, call histories, scheduled follow-up tasks, and sales agent performance scorecards.
• Granular enterprise permissions: Multiple operational departments (Sales Representatives, Account Managers, Support Staff, Financial Auditing, and Senior Executives) required strict data boundaries, ensuring staff could only access customer accounts and supplier contracts pertinent to their assigned territory and role.
• Data protection & regulatory compliance: Commercial supplier pricing, financial accounts, and contractor contact lists represented sensitive commercial assets requiring encryption at rest and strict data retention controls.
• High-density data performance: As records expanded into tens of thousands of leads, suppliers, and customer tickets, UI tables needed sub-second loading without browser freeze or unresponsiveness.

Frontend Engineering: React, Ant Design & Lean State Architecture

To maximize developer velocity and deliver a clean, consistent administrative interface, we adopted a pragmatic frontend stack:

• Rapid enterprise UI with Ant Design: Selected Ant Design (antd) for its comprehensive ecosystem of production-ready enterprise primitives (including advanced data tables, multi-tier filter dropdowns, drawer inspection panels, modal dialogues, and notification toasts) to reduce custom UI overhead.
• Predictable form handling with Formik: Complex multi-stage workflows (including supplier onboarding dossiers, tax certification uploads, and commission calculation forms) were implemented using Formik with declarative validation schemas, ensuring instant field-level feedback and reliable submission handling.
• Lean state management with React Context API: By enforcing strict component modularity and decoupled feature boundaries, we managed global state (authenticated user session, active workspace filters, and alert counts) using native React Context. This eliminated unnecessary external state dependencies while keeping bundle sizes lean and debugging straightforward.

Backend Architecture: Laravel RESTful APIs & Granular RBAC

The backend was engineered for rock-solid security, auditability, and speed:

• Role-Based Access Control (RBAC) via Spatie: Integrated spatie/laravel-permission to define an explicit matrix of roles and permissions. Authorization policies guard every REST endpoint at the controller and query level, preventing unauthorized access across departments and mitigating privilege escalation risks.
• Data encryption at rest: Applied application-level encryption to sensitive customer contact records, bank accounts, and proprietary supplier contracts, ensuring stored records remain unreadable even in the event of unauthorized database dumps.
• Deterministic data disposal: Implemented a strict data handling policy that deliberately avoids soft-deletes on security-critical and sensitive operational records where compliance and privacy guidelines mandate deterministic, permanent disposal and audit logging.

Performance Optimization for Dense Data Grids

To maintain instantaneous responsiveness as business records multiplied, full-stack optimizations were enacted:

• Server-side pagination & sorting: Offloaded table pagination, multi-column sorting, and complex faceted filtering to the Laravel backend. MySQL queries fetch only the exact records visible within the active page view.
• Database index tuning & query optimization: Added composite database indexes to frequently queried columns (such as lead status, sales representative ID, and submission timestamps) and enforced eager loading across related models to eliminate N+1 query overhead.
• Coordinated multi-tier caching: Leveraged Redis to cache stable organizational lookup tables (such as product categories, regional territories, and permission trees) while caching active report summaries, drastically lowering database utilization.

Key Measured Outcomes

• Unified operational hub: Consolidated fragmented sales, support, and supplier verification pipelines into a single high-efficiency React interface.
• Sub-second query responses: Server-side pagination, composite database indexing, and Redis caching maintained sub-second table rendering across tens of thousands of records.
• Strict enterprise security: Spatie RBAC policies and sensitive field encryption ensured zero unauthorized data exposure across operational tiers.
• Accelerated developer velocity: Combining Ant Design primitives with Formik allowed rapid delivery of complex administrative modules with minimal UI regressions.