Skip to content

Clinical / Healthcare

Enterprise Clinical Platform

Workflow-driven clinical application with role-based access, dashboards and enterprise integrations.

My role
Full Stack Developer
Project type
Enterprise web application
Domain
Clinical / Healthcare

The problem

Clinical operations teams needed a single application to manage structured records and multi-step review workflows that were previously handled across spreadsheets, email threads and disconnected internal tools. The process had strict rules about who could see and change what, and at which stage.

The solution

A web application with an explicit workflow model: each record moves through defined states, each transition is permitted only for specific roles, and every change is recorded. A React front end handles data entry, review queues and dashboards; a .NET Web API enforces the rules and persists to SQL Server; enterprise identity provides sign-in and group membership.

Technical architecture

A simplified, public-safe view of how the pieces fit together.

Client

React SPA

Role-aware UI, forms, review queues, dashboards

Identity

Enterprise SSO (OIDC)

Sign-in, tokens, group membership

API

.NET Web API

REST endpoints, validation, authorisation

Domain

Workflow & business rules

State transitions, permission checks, audit

Data

SQL Server

Relational schema, stored procedures, reporting queries

A generic, sanitised view of the application shape. It does not represent any client’s internal architecture.

My contribution

  • Built React screens for data entry, review queues, filtering and role-specific dashboards.
  • Implemented Web API endpoints covering record CRUD, workflow transitions and dashboard aggregates.
  • Modelled workflow state and permission checks so the same rules applied to both UI affordances and API authorisation.
  • Wrote and tuned SQL Server queries and stored procedures behind list views and reports.
  • Integrated enterprise sign-in and mapped identity-provider groups to application roles.
  • Diagnosed and fixed production defects reported by business users, including data-integrity and performance issues.

Engineering challenges

Keeping permission rules in one place

Early on, the UI hid actions the user could not perform while the API re-implemented the same checks separately. The two drifted. The fix was a single server-side authorisation model, with the API returning the allowed transitions for each record so the UI renders from that rather than duplicating the logic.

Dashboards that got slower as data grew

Aggregate views written as straightforward queries were fine at demo volumes and slow in production. Reading execution plans pointed to missing covering indexes and per-row subqueries; restructuring the aggregates and adding the right indexes brought them back into an acceptable range.

Changing rules without breaking history

Workflow rules changed as the process matured. Records already in flight had to remain valid, so transitions were versioned rather than rewritten, and migrations were written to be reversible.

Key features

  • Multi-step workflow with explicit, role-gated state transitions
  • Role-based access control applied consistently in the API and UI
  • Filterable, paginated record views with server-side sorting
  • Operational dashboards and exportable reports
  • Enterprise single sign-on
  • Change history for auditability

Outcome

A process that previously depended on manual coordination ran inside one application with defined roles, states and visibility. Specific business metrics are confidential and are deliberately not published here.

Lessons learned

  • Authorisation belongs on the server; the UI should render what the server says is permitted rather than deciding for itself.
  • Query performance work needs production-shaped data — demo datasets hide the problems that matter.
  • In a regulated domain, "who changed what, and when" is a feature, not an afterthought.

Keep reading

Other case studies

All projects
CRM / Business Applications

CRM & Business Dashboard

Record management, multi-criteria filtering, reporting and role-scoped dashboards for internal business teams.

Role
Full Stack Developer
Type
Enterprise web application
Angular TypeScript ASP.NET MVC Web API SQL Server +3
Education / EdTech

Learning Management Platform

Courses, content structures, learner progress workflows and administrative dashboards.

Role
Software Developer
Type
Web application
PHP Laravel MySQL JavaScript Bootstrap +2
↑ ↓ to navigate · ↵ to open · esc to close Full search