SECURE ROLE-BASED ALUMNI DIGITAL ARCHIVE AND NETWORKING PLATFORM FOR POLYTECHNIC EDUCATION

This paper presented the design and implementation of a secure Alumni Digital Archive for PSG Polytechnic College that combines centralized MySQL storage, portal-aware authentication, role-based authorization, privacy-preserving student access, institutional verification, reporting, bulk import, and persistent database-backed statistics. The system is designed around a simple principle: authenticated access does not imply unrestricted access. The architecture separates six portal experiences while keeping authorization decisions on the backend. Administrative users retain controlled management capabilities, whereas students receive a minimal read-only directory with a View Profile operation and only additional details approved for networking. Explicit SQL projection prevents protected personal and administrative fields from entering student JSON responses. Database-backed statistics and read-only initialization ensure browser refreshes reconstruct the interface from persistent records rather than erasing or overwriting them. The work demonstrates that an institutional alumni platform can move beyond a basic directory by treating identity, authorization, privacy, persistence, and data lifecycle as first-class engineering requirements. With continued validation, data-quality governance, and production security hardening, the platform can serve as a durable digital foundation for alumni preservation and academic networking.

[1] R. S. Sandhu, E. J. Coyne, H. L. Feinstein, and C. E. Youman, “Role-Based Access Control Models,” Computer, vol. 29, no. 2, pp. 38–47, 1996. [2] D. F. Ferraiolo, D. R. Kuhn, and R. Chandramouli, Role-Based Access Control, 2nd ed. Norwood, MA, USA: Artech House, 2007. [3] OWASP Foundation, OWASP Application Security Verification Standard (ASVS), Version 4.0.3, 2021. [4] OWASP Foundation, OWASP Top 10: The Ten Most Critical Web Application Security Risks, 2021. [5] R. Anderson, Security Engineering: A Guide to Building Dependable Distributed Systems, 3rd ed. Indianapolis, IN, USA: Wiley, 2020. [6] A. Silberschatz, H. F. Korth, and S. Sudarshan, Database System Concepts, 7th ed. New York, NY, USA: McGraw-Hill, 2019. [7] I. Sommerville, Software Engineering, 10th ed. Boston, MA, USA: Pearson, 2015. [8] E. Bertino and R. Sandhu, “Database Security—Concepts, Approaches, and Challenges,” IEEE Transactions on Dependable and Secure Computing, vol. 2, no. 1, pp. 2–19, 2005.