Open-Source Alternatives to Lattice

ERPNext is a comprehensive enterprise resource planning suite designed to integrate core organizational functions, including accounting, inventory, human resources, and project management, into a single unified platform. It operates as a metadata-driven business application, where data structures and application logic are defined through configuration rather than hard-coded programming to facilitate rapid customization. The system distinguishes itself through a robust security and governance framework that enforces granular, role-based access control across all document operations. It feature

NestJS Access Control is a role-based and attribute-based authorization framework designed for the NestJS ecosystem. It provides a declarative system for securing application routes and resources, allowing developers to enforce granular access policies through metadata-driven decorators. The framework distinguishes itself by supporting hierarchical role inheritance, which enables the resolution of complex permission sets by traversing parent and child role relationships. It also facilitates dynamic authorization management, allowing security rules to be loaded asynchronously from external dat

This project is a Go-based identity and access management system that functions as a centralized authentication and authorization server. It provides a framework for managing user identities and controlling access to resources within enterprise environments. The system implements a role-based access control model, where permissions are grouped into roles and mapped to specific user accounts to manage resource access levels. The codebase covers the implementation of user authentication systems, identity management, and backend security patterns. It utilizes a database-backed identity store an

SpringBoot-Shiro-Vue is a permission management framework and role-based access control system. It provides a backend implemented with Spring Boot and a frontend built with Vue.js to manage user roles and map them to specific interface and API access rights. The project utilizes a token-based authentication system to verify user identities and enable stateless communication between the frontend and backend. It implements granular UI permission control to show or hide specific buttons and interface elements based on the current user's assigned access rights. The framework covers API security

EasyAdminBundle is a tool for automatically generating backend management interfaces for Symfony applications. It builds administrative screens and forms by mapping database entity definitions to user interface components, providing a web-based system for managing database records through searchable lists and CRUD forms. The project supports the creation of separate administration backends tailored for different user roles or external collaborators. It includes a security layer for restricting dashboards, menus, and data fields based on role-based access control and user security tokens. The

This project is a Spring Boot administrative framework and enterprise backend boilerplate designed for building management systems. It provides a foundation for enterprise-level applications using a reactive programming model and non-blocking data access patterns. The framework includes a reactive CRUD system for database operations and a role-based access control system to manage user accounts and administrative permissions. It further distinguishes itself with a centralized data dictionary for maintaining standardized labels and values across application modules. The system's broader capab

Ferry is an open-source workflow engine designed to manage ticket-based processes across departments. It provides a platform for submitting, tracking, transferring, and closing tickets, with personal and all-ticket views for full lifecycle management. The system is built around a configurable process template designer that supports serial, parallel, and conditional node routing, enabling flexible approval sequences. The platform distinguishes itself through dynamic variable-based approver assignment, where task approvers can be determined by organizational variables such as direct supervisor,

This project is a React admin dashboard boilerplate designed for building backend administrative interfaces. It provides a pre-configured development stack that integrates a Redux state management framework, a role-based access control system, and a standardized Axios HTTP client wrapper. The system includes a mock API development environment that serves fake data through a local server to decouple frontend development from backend availability. It uses Vite for module bundling and provides a component-library based UI for constructing management interfaces. The platform covers a broad range

This is a role-based access control system for Laravel applications that manages user permissions and roles within a database. It provides a database permissions manager to assign specific abilities to users and roles, utilizing authorization gates to restrict access to routes and interface elements. The project features a wildcard permission system that uses pattern matching to grant broad access across multiple related permissions. It also supports team-scoped access control, allowing users to maintain different roles and permission levels across separate organizational contexts or teams.

Geeker-Admin is a Vue.js admin dashboard framework designed for building backend management interfaces. It utilizes Vue 3, TypeScript, and Vite to provide a foundation for creating data-driven administration panels. The framework features a configurable data table engine that generates complex grids automatically from predefined configuration objects. It incorporates a role-based access control system to restrict access to specific pages and interface elements based on user permissions. The system includes a centralized state management store for persistent global data and page state preserv

Logto is an open-source identity provider that serves as a centralized authentication and authorization server for web, mobile, and command-line applications. It implements the OpenID Connect and OAuth 2.1 standards to handle secure user sign-in and the issuance of identity tokens. The platform is specifically designed as a multi-tenant authentication framework for software-as-a-service environments, featuring built-in organization management and tenant isolation. It includes an enterprise single sign-on gateway to integrate external identity providers and supports role-based access control t

Frappe is a Python-based low-code web framework used for building data-driven business applications. It functions as a full-stack meta-framework that integrates a Python backend with a JavaScript frontend, providing a development environment for rapid application prototyping and deployment. The framework employs a model-driven architecture that automatically generates database schemas, REST API endpoints, and administrative interfaces based on defined metadata. This system is complemented by a command-line scaffolding tool for creating standardized project directory structures and boilerplate