Apache Fineract maker-checker and permissions
Designing four-eyes control in Fineract: which state-changing APIs to put under maker-checker, roles and fine-grained permissions, the approval queue, and the command audit trail auditors and regulators ask to see.

