SmartLink
Web design & development

Web portal development in Pakistan: customer, dealer and partner portals

Web portal development in Pakistan is bought to move a queue. Order status, statements, delivery documents and tickets stop arriving by telephone and start answering themselves, with each account seeing only what belongs to it. SmartLink Services builds customer, dealer and partner portals from Karachi on React and Node, reading live from the ERP rather than from a copy of it, with single sign on or account login and every external access logged. Below is the commercial detail. What a portal costs at published market rates, how long one takes to build, and when the portal module your ERP vendor already sells is the better answer than anything we could write.

Users
Customers \u00b7 dealers
Auth
SSO or account login
Data
Live from ERP
Overview

A portal works when it answers the question before the phone rings.

Most of the enquiries reaching a customer service desk are requests for information that already exists. Where is my order. Can I have a copy of that invoice. What is my outstanding balance. Has the engineer been assigned. Each answer costs a person several minutes, arrives late, and interrupts work that was more valuable. A portal is worth building when there are enough of those questions to justify it, and it is worth building carefully because the data behind them is commercially sensitive.

The whole design turns on permissions. A dealer must see their own orders and not a competitor's. A customer with three delivery locations may need all of them, while one of their staff needs only one. A finance contact may see statements when an operational contact should not. That model has to be defined against how your accounts are genuinely structured, and enforced on the server for every request, because access control that lives in the interface is not access control.

Beyond that, a portal is an integration and an operations problem. It reads from systems that were never designed to be exposed, so it needs caching, timeouts and sensible behaviour when the source is unavailable. It gains external users, so it needs invitations, password resets and a way to remove somebody the day they leave. And it needs audit logging, because at some point a person will ask who looked at what.

Scope

What Web portals & dashboards covers

Everything below is agreed in writing before any web & digital work starts, so both sides know what is in and what is not.

What the work covers

  • Role and permission model per external user type
  • Order, invoice, statement and document views
  • Ticket raising, tracking and notification flows
  • Dashboard and report views with export
  • Single sign-on or account-based authentication
  • Audit logging of external access

What you get at handover

  • Deployed portal across environments
  • Permission and role matrix
  • Integration specification
  • Audit logging configuration
  • Administrator guide

Typically involves

REST APIs SSO
Discuss this service
01

Permission models fail at the second account

A portal demonstrated with one test customer always looks right. The problems arrive with the second, and with the customer who is also a supplier, the dealer with sub dealers, the group of companies sharing a credit account, and the person who works for two of your customers at once. If the model assumes one user belongs to one account, each of those becomes an exception, and exceptions in a permission model are how data ends up in front of the wrong person.

We separate the user from the account relationship deliberately. A person authenticates as themselves and holds one or more grants against accounts, each with a role. Hierarchies are modelled where they exist, so a parent can be given visibility of children without every child seeing the parent. Roles are defined by what somebody is allowed to do rather than by job title, since titles vary between customers and permissions should not.

Enforcement then happens once, on the server, at the data access layer. Filtering a list in the interface while the underlying endpoint will return any record to anyone who changes an identifier in the address bar is the flaw OWASP describes as broken object level authorisation, and it remains one of the most common serious faults in portals. We test it deliberately, by taking a valid session for one account and attempting to read another account's records, and we keep that test in the regression suite.

  • Users separated from account grants, so one person can hold access to several accounts
  • Account hierarchies modelled where parents, subsidiaries and sub dealers genuinely exist
  • Roles defined by permitted actions rather than by job titles that vary between customers
  • Authorisation enforced server side on every request, not by filtering in the interface
  • A standing test that attempts cross account access and is expected to fail
02

Reading from an ERP that was never meant to face the internet

The data a portal shows normally lives in a system sized for internal users and protected accordingly. Pointing an external audience at it directly creates two problems at once: an availability risk, since a burst of portal traffic can slow the system your staff depend on, and a security exposure, since the ERP is now reachable from outside in some form. Neither is a reason to avoid the project, but both need answering in the architecture rather than in a meeting afterwards.

The usual answer is a read layer. An integration service holds the data the portal needs, refreshed at a frequency chosen per data type, and the portal reads from that rather than from the ERP directly. Order status may need to be close to live. A statement can be produced daily. A document can be fetched on demand with a timeout and a queue. Where a figure is a copy, the interface says when it was last updated, so nobody makes a decision on stale data believing it is current.

Degradation matters as much as normal operation. When the source system is down for its month end run, the portal should serve what it can with a clear notice, not present an error page or, worse, blank figures that look like zeroes. Writes need care too. A ticket raised in the portal has to arrive exactly once, so it gets an idempotency key and a visible status rather than a hopeful confirmation message.

  • A read layer between the portal and the ERP, refreshed per data type rather than uniformly
  • Freshness shown in the interface wherever a figure is a copy rather than a live read
  • Defined degraded behaviour when the source is unavailable, including during month end
  • Timeouts and queueing for expensive operations such as document generation
  • Writes made idempotent, with a visible status rather than an optimistic confirmation
01

What a web portal costs in Pakistan

A portal is priced as a custom web application rather than as a website, and published market rates for that work run PKR 200,000 to 1,000,000 and upwards. The lower end covers one external audience reading one thing: dealers checking order status, say, with a login and a read only view. The upper end covers several audiences, documents, ticketing, statements, exports and a permission model that has to be right the first time. A business website at PKR 80,000 to 200,000 is not the comparison, however similar the two look in a design.

Hourly rates are worth quoting alongside. Full stack development here is published at PKR 3,500 to 8,000 an hour, junior work at PKR 500 to 1,000, and a permission model is not junior work. Where a mobile application accompanies the portal for field or dealer use, published market pricing for that adds PKR 400,000 to 800,000.

User types set the price, and every organisation underestimates how many they have. A customer, a customer's accounts clerk who may see invoices but not prices, a dealer, a sub dealer under that dealer, a sales manager who sees a region, an internal administrator. Each is a permission rule and a test case, and the rules multiply rather than add. Reading from an ERP that was never designed to face the internet is the second line, and it usually means a service layer, a read replica or a cache with a defined staleness rather than a direct connection. Documents are third: statements and delivery notes have to be generated or fetched, stored somewhere with retention agreed, and served only to the account that owns them. Auditing external access is fourth and it is not optional. Everything above is market pricing. A real figure follows discovery, once the audiences, the data sources and the document flows are written down.

  • Portals priced against custom application rates of PKR 200,000 to 1,000,000 and upwards
  • Every external user type enumerated before pricing, since permission rules multiply
  • A service layer or read replica costed rather than a direct connection to the ERP
  • Document generation, storage and retention treated as scope in its own right
  • A companion mobile application priced separately at a published PKR 400,000 to 800,000
02

How long a portal takes to build

Reported timelines put a focused single scope go live at six to twelve weeks, which fits one audience with one or two views: order status and invoice history for dealers, with a login and an audit log behind it. Three to six months is the honest band for several audiences with tickets, documents, exports and single sign on.

Access to the ERP is the first gate and it is rarely quick. A read account, a test environment holding realistic data, and agreement from whoever owns that system about what may be read and how often. Where the ERP belongs to a vendor under a support contract, their opinion is part of the schedule and their response time is not yours to manage.

Identity is the second. Deciding how an external user proves who they are, who may invite a colleague, what happens when a dealer's accounts clerk leaves, and how an account is suspended: these are business decisions with a policy behind them, and a portal built before they are settled gets rebuilt.

The third is data that is not fit to show. Statements that only balance after a manual adjustment, delivery notes filed under three naming conventions, prices that need a person to interpret them before they mean anything. A portal makes all of that visible to a customer, which is the point of it and also the risk, so we look at real records in the first fortnight rather than at a sample somebody tidied up for the meeting. Fixing what that exposes is often a separate piece of work and it is better found early than after launch.

  • Six to twelve weeks reported for one audience with one or two views
  • Three to six months once tickets, documents, exports and single sign on are in scope
  • ERP read access, a realistic test environment and vendor agreement requested first
  • Identity, invitation and suspension policy settled before the permission model is built
  • Real records reviewed early, since a portal exposes data quality to your customers
03

Extending the portal your ERP already ships or building your own

Before commissioning anything, find out what you already own. SAP, Oracle, Dynamics, Odoo and most mid market products ship a customer or partner portal of some kind, and a proportion of the organisations that ask us for a portal are paying maintenance on one already. Where the requirement is order status, invoice history and a document download, the vendor module often covers it, and it comes with the vendor's authorisation model rather than one we would have to invent.

The costs of that route are real and they are commercial rather than technical. External users are frequently licensed, so a portal offered to nine hundred dealers is a licence conversation before it is a project. The interface is the vendor's, so it will look like the ERP rather than like your company, and the things it cannot do it cannot be made to do. Upgrade cycles apply to it too. Ask three questions before committing: what does an external user cost, what can be changed, and what happens to those changes at the next upgrade.

Building your own earns its cost where the portal has to do something the ERP does not model. Several systems behind one login, so a customer sees orders from the ERP, tickets from a service desk and documents from a file store without knowing there are three. An audience the ERP has no concept of, such as a sub dealer under a dealer. A workflow that belongs to your business, like a claim raised against a delivery with photographs attached. Or a licence position where per user pricing makes the vendor module absurd at your audience size.

What we advise against in both directions is a portal that adds a step. If a dealer still telephones to confirm what the portal told them, the portal has not removed the call, it has added a screen. So the measure agreed before anything is built is which specific queue this removes, whose telephone stops ringing, and what those people will do instead. We have recommended a client use the module they already licensed and walked away from the build, and we would do it again.

  • Vendor portal modules checked for coverage before a custom build is scoped
  • External user licensing established early, since audience size can decide the answer
  • A custom portal justified by several sources behind one login or an audience the ERP lacks
  • Workflows that belong to your business, such as delivery claims, built rather than forced
  • The specific queue the portal removes agreed in advance as the measure of success
How we deliver

Delivering Web portals & dashboards

Nothing is drawn until we know what the existing site has already earned. The six steps below start with an audit and end with a maintenance schedule, because that is where sites are actually lost.

  1. 01

    Discover

    Every existing URL is crawled and matched against analytics, so we know which pages earn traffic and which have never been read. Content owners are named in the same week, with dates attached.

  2. 02

    Blueprint

    Address structure, the content model and the authorisation rules for any signed in area come first. Wireframes follow, and the redirect map from old URLs to new is drafted before a template is designed.

  3. 03

    Build

    Components are built once and reused, to WCAG 2.1 AA, with content areas that an editor can change without a developer. Portal screens are wired to the source system, not to a copied database.

  4. 04

    Test

    Keyboard navigation, screen reader order, form labelling and contrast are checked against the standard, not assumed. Checkout is tested with a real payment provider in test mode, including a declined card.

  5. 05

    Go live

    Redirects go live with the site, and we watch server logs and search console for the ones we missed. Certificate, domain and analytics property are checked as a list, in your accounts.

  6. 06

    Run

    Framework and plugin updates go on a schedule, staged before production. Uptime monitoring requests a page that exercises the database, because a site can answer and still be broken where it counts.

Working together

Worth building

A portal repays its cost when there is enough repetitive enquiry volume to justify it and enough discipline to keep it current. Where a handful of customers phone a person they know and are happy doing so, a portal will be built, used briefly and abandoned, and the data behind it will drift until it becomes actively misleading. We would rather say that at the start than deliver something that turns into a liability.

Where it is justified, the value comes from the parts invisible in a demonstration: the permission model, the behaviour when a source system is unavailable, the deactivation path and the audit log. Those are the things we design first, because they decide whether the portal is trusted with real data.

Credentials

Accreditations behind Web & digital

A portal is only as good as the system behind it, so these credentials describe what our web work reads from and runs on.

Client words

What Web & digital clients say

Comments from people who run web & digital systems day to day.

  • They wrote our requirement documentation knowing it had to survive a tender committee, and they were direct when one of our requirements could only be met by a single supplier. We would not have caught that ourselves. The audit trail design has since been through a full review without a finding.
    IT Director Public sector authority
  • Our first concern with FBR integration was simple: what happens to the tills when the line drops. They built the queueing and retry before anything else and demonstrated it by pulling the connection in front of us. Trading carried on, and the invoices went up when the link came back.
    Operations Manager Retail chain, Pakistan
  • Every vendor we spoke to said they could handle style, colour and size. This team asked to see our order book first, then told us which of the shortlisted platforms would need thousands of item codes to do it. That one piece of advice probably saved us a year.
    General Manager Textile exporter
Questions

Questions about Web portals & dashboards

A portal is priced as a custom web application, published at PKR 200,000 to 1,000,000 and upwards. One external audience with a read only view sits at the lower end; several audiences with documents, ticketing and single sign on sit well above it. A companion mobile application adds a published PKR 400,000 to 800,000. Those are market ranges, and our figure follows discovery.

Reported timelines give six to twelve weeks for one audience with one or two views, and three to six months once tickets, documents, exports and single sign on are involved. Getting a read account and a realistic test environment from whoever owns the ERP usually takes longer than expected, particularly where a vendor support contract sits in the way.

Yes, through a service layer or a read replica rather than a direct connection from the internet. We agree what may be read, how often, and what the portal displays when the ERP is unavailable. Where the ERP is under a vendor support contract, the access method is agreed with them so that a later upgrade does not break the portal.

A store sells to anybody at a published price. A dealer portal serves a known account at a contracted price, often with a credit limit, a delivery schedule and a hierarchy of users under one company. The permission model is the product. Most of the engineering goes into who may see what, rather than into the checkout.

Yes, and it is worth designing properly rather than adding later. A company account with users under it, roles within that account so an accounts clerk sees invoices without seeing negotiated pricing, an invitation flow the dealer runs themselves, and a way to remove somebody the day they leave. Every one of those actions is written to an audit log.

A real one in the first fortnight, mostly logins and questions about figures that were always there but never visible. Plan for it: a named person answering, a short guide written in the language your dealers use, and a way for support to see what a user sees without asking for their password. The load falls sharply once the first cohort is through.

Answering the same customer questions every day?

Tell us what you run today and where web portals & dashboards is causing you trouble. The first conversation is a consultation rather than a pitch.