{
  "credential": {
    "type": "database",
    "host": "95.217.63.56",
    "port": 1632,
    "database": "business_kedebah",
    "username": "kedebahBusinessUser",
    "password": "n3wKedebahuSer!",
    "api_url": "https://kedebah.com/api"
  },
  "actions": [
    {
      "action": "Read staff data",
      "endpoint": "/staff",
      "method": "GET",
      "evidence": "kedebah_v2_pim_api/routes/api.php",
      "risk": "LOW"
    },
    {
      "action": "Read user history",
      "endpoint": "/my-history",
      "method": "GET",
      "evidence": "kedebah_v2_pim_api/routes/api.php",
      "risk": "LOW"
    },
    {
      "action": "Read pending reviews",
      "endpoint": "/pending-review",
      "method": "GET",
      "evidence": "kedebah_v2_pim_api/routes/api.php",
      "risk": "LOW"
    },
    {
      "action": "Submit reviews",
      "endpoint": "/review",
      "method": "POST",
      "evidence": "kedebah_v2_pim_api/routes/api.php",
      "risk": "MEDIUM"
    },
    {
      "action": "Manage tenants",
      "endpoint": "/tenant",
      "method": "GET/POST",
      "evidence": "kedebah_v2_pim/routes/web.php",
      "risk": "HIGH"
    },
    {
      "action": "Manage central config",
      "endpoint": "/central",
      "method": "GET/POST",
      "evidence": "kedebah_v2_pim/routes/web.php",
      "risk": "HIGH"
    },
    {
      "action": "Custom modules",
      "endpoint": "/custom",
      "method": "GET/POST",
      "evidence": "kedebah_v2_pim/routes/web.php",
      "risk": "MEDIUM"
    },
    {
      "action": "HR functions (leave, onboarding, offboarding)",
      "endpoint": "/leave, /onboarding, /offboarding",
      "method": "GET/POST",
      "evidence": "kedebah_v2_pim/routes/web.php",
      "risk": "HIGH"
    },
    {
      "action": "KPI management",
      "endpoint": "/kpi, /kpi-review, /kpi-grading",
      "method": "GET/POST",
      "evidence": "kedebah_v2_pim/routes/web.php",
      "risk": "MEDIUM"
    },
    {
      "action": "Course management",
      "endpoint": "/courses, /enrolled-courses",
      "method": "GET/POST",
      "evidence": "kedebah_v2_pim/routes/web.php",
      "risk": "LOW"
    }
  ],
  "routes": {
    "pim_api": [
      "staff",
      "my-history",
      "pending-review",
      "review"
    ],
    "web": [
      "central",
      "tenant",
      "custom",
      "leave",
      "onboarding",
      "offboarding",
      "kpi",
      "courses"
    ]
  },
  "database_tables": []
}