System Config & Module Toggles

⚠️ Changes to integration credentials and security settings require a system restart. Maker-checker approval required for Payments and KYC config changes.

💳 Payment Gateway Razorpay Active

Gateway Provider

API Key ID *

API Key Secret *

Webhook Secret

Environment

Currency

📱 SMS Provider MSG91 Active

Provider

Auth Key *

Sender ID

OTP Template ID

💬 WhatsApp Business API Interakt Active

Provider

API Key *

WhatsApp Business No.

Templates Active

✉️ Email Provider SendGrid Active

Provider

API Key *

From Email

Reply-to

🪪 KYC / Document Verification Manual Fallback

Primary Method

DigiLocker Client ID

Max KYC SLA (hours)

Allowed Document Types

🌤 Weather API Open-Meteo Active

Provider

Location (Latitude)

Location (Longitude)

Flash Sale Trigger Temp (°C)

Role-Based Access Control Matrix

Permission	Customer	Biz Customer	Travel Agent	Call Centre	Gate Staff	Sales Exec	Sales Mgr	Marketing	Finance	CMS Editor	Super Admin
Book Tickets (B2C)	✅	✅	❌	✅	❌	❌	❌	❌	❌	❌	✅
Book Tickets (B2B)	❌	✅	✅	✅	❌	✅	✅	❌	❌	❌	✅
View Bookings (Own)	✅	✅	✅	✅	❌	✅	✅	❌	❌	❌	✅
View All Bookings	❌	❌	❌	✅	❌	✅	✅	✅	✅	❌	✅
Scan QR / Gate	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	✅
Override Gate Entry	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	✅
Create Offers	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	✅
Approve Offers (>20% disc)	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	✅
View Finance/Revenue	❌	❌	❌	❌	❌	❌	✅	✅	✅	❌	✅
Generate Invoices	❌	❌	❌	❌	❌	✅	✅	❌	✅	❌	✅
Approve Refunds	❌	❌	❌	❌	❌	❌	✅	❌	✅	❌	✅
Manage CMS	❌	❌	❌	❌	❌	❌	❌	✅	❌	✅	✅
Approve B2B Partners	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	✅
System Config	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅
Audit Logs View	❌	❌	❌	❌	❌	❌	✅	❌	✅	❌	✅
Module Toggles	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅

🏢 EALCPL Legal Identity

Company Name

Short Name

CIN

GSTIN

PAN

State Code (Supply)

Registered Address

Support Phone

Support Email

🏦 Bank Details (Payout Account)

Bank Name

Account Number

IFSC Code

Account Type

🔐 OTP Configuration

OTP Length

OTP Expiry (mins)

Max Attempts

Lockout Duration (mins)

Max Resend Requests/hr

🛡 Cloudflare WAF

Bot Management

Cloudflare Bot Fight Mode

Turnstile CAPTCHA

On booking & login forms

Rate Limiting

100 req/min per IP

DDoS Protection

Always-on Cloudflare

🔑 QR Token Security

HMAC Algorithm

Token Rotation (days)

Duplicate Scan Detection

📋 Consent & Data

Consent Policy Version

Data Retention (months)

Maker-Checker for Finance

KYC Doc Access Limits