StaffCentral brings employee records, group management, and an internal support desk together into a single desktop app — no subscription juggling required.
Built by Tommy Levasseur · Java + JavaFX · PostgreSQL on Supabase
Most small organisations end up running three or four different tools just to manage their people and handle support requests. StaffCentral rolls all of that into one desktop app that isn't overkill to set up.
Employees get a clean view of their own profile, groups, and tickets. Admins get the full picture — every employee, every group, every ticket, and a complete audit trail of everything that's happened.
Here's everything the app covers — from the moment an employee joins to the moment a support ticket gets closed.
Admins can create, edit, and deactivate employee accounts. Each person has a profile with their department, position, and supervisor.
Regular employees see their own stuff. Admins see everything. The sidebar and available actions adjust automatically based on who's logged in.
Organise employees into groups with a designated supervisor. People can see which groups they belong to from their profile.
Staff raise support tickets and track them from open to resolved. Admins assign, prioritise, and move tickets through the workflow.
When your ticket moves to a new state or gets assigned, you get an in-app notification. No email, no external tools needed.
Every admin action gets recorded — who did what, and when. It's permanent and can't be edited, so there's always a clear trail.
Dark sidebar, light content area, clean cards. The app looks the same whether you're an employee or an admin — just with more in the menu.
Tickets move through states as work progresses. There's a state for pretty much every situation — including getting stuck waiting on someone else.
Security wasn't an afterthought. Passwords are hashed properly, sessions live only in memory, and role restrictions are enforced at multiple levels — not just hidden behind a button.
No plaintext passwords anywhere. BCrypt is deliberately slow, making brute-force attacks expensive. New staff get a one-time temporary password that forces a change on first login.
Nothing sensitive gets written to disk. Once you log out, your session is gone completely — no tokens, no cached credentials left behind.
Admin-only features aren't just hidden in the UI — they're blocked at the action level too. Even if something were misconfigured in the interface, the operation itself would still be denied.
The mandatory password change screen — shown automatically on first login or after an admin reset.