INTEGRASI KEAMANAN API BERBASIS RBAC DAN AUDIT TRAIL PADA BACKEND SISTEM INFORMASI EKSEKUTIF REKRUTMEN UNTUK OPTIMALISASI PENGAMBILAN KEPUTUSAN STRATEGIS (STUDI KASUS: PT SOLOMON INDO GLOBAL)

Abstract

Backend development for recruitment Executive Information Systems (SIE) faces the challenge of aligning fast statistical data presentation (low latency) with strict protection of sensitive data. This research aims to design a REST API architecture using NestJS and PostgreSQL which focuses on two main pillars. First, to support executive needs in making strategic decisions, optimization of data aggregation at the database level (database-level aggregation) is carried out. This enables responsive presentation of statistical metrics and drill-down visualization features without burdening server memory. Second, implementing layered security (Defense in Depth) through JWT authentication, role-based authorization (Role-Based Access Control/RBAC), and Bcrypt hashing. In addition, an Audit Trail mechanism is implemented on the history table to ensure accountability and the principle of Non-Repudiation. Test results show that this architecture is successful in providing accurate and fast SIE data, while mitigating the risk of illegal access and data manipulation through strict access controls.