This project simulates a cloud secure document access and audit compliance workflow. It includes a Flask-based command center for reviewing protected documents, requesting access, enforcing role-based permissions, tracking access attempts, classifying risk, and generating compliance evidence.

The system reflects how cloud support, SOC, and security operations teams monitor sensitive document access, investigate denied requests, and produce audit-ready reports.

• Flask-Based Secure Document Portal
• Role-Based Access Control
• Document Sensitivity Classification
• Access Granted And Access Denied Tracking
• Security Event Classification
• Audit Trail Generation
• Compliance Status Reporting
• Executive Dashboard Metrics
• JSON Compliance Report Endpoint
• Enterprise-Style Command Center UI

A higher role can access documents assigned to lower roles.

1. User logs into the command center.
2. The dashboard displays classified documents.
3. User requests access to protected documents.
4. The system evaluates role permissions.
5. Access is granted or denied.
6. Each attempt is written to the audit log.
7. Risk level and compliance status are assigned.
8. The dashboard updates executive metrics.
9. JSON compliance evidence can be exported.

• app.py
• templates/login.html
• templates/dashboard.html
• static/css/styles.css
• data/portal_users.json
• data/documents.json
• logs/document_access_audit.log
• reports/access_compliance_report.json
• screenshots/
• README.md
• requirements.txt

Install dependencies:

pip install -r requirements.txt

Run the Flask app:

python app.py

Open:

http://127.0.0.1:5000

After generating access events in the dashboard, open:

http://127.0.0.1:5000/report

This returns a structured JSON report containing access attempts, denied requests, high-risk events, and compliance failures.

This project reflects cloud support and security operations responsibilities:

• Validating Secure Access To Sensitive Documents
• Monitoring Denied Access Attempts
• Tracking Audit Evidence
• Identifying High-Risk Access Events
• Supporting Compliance Visibility
• Producing Structured Reports For Investigation
• Communicating Access Risk Clearly Through A Dashboard