Build secure, scalable enterprise applications with advanced RBAC, Row-Level Security, Column-Level Security, and multi-database support. Accelerate development with low-code CRUD generation powered by metadata-driven architecture.
A comprehensive framework designed for mission-critical enterprise applications with built-in security, scalability, and developer productivity.
Complete RBAC implementation with Role-Based Access Control, Row-Level Security (RLS), and Column-Level Security (CLS) for granular data protection.
Metadata-driven dynamic CRUD operations. Generate complete data management interfaces from database schemas with minimal code.
Connect to 8+ database vendors including PostgreSQL, MySQL, MariaDB, H2, SQLite, HSQLDB, Derby, and Firebird with unified API.
Built-in i18n support with 4 languages ready (pt_PT, en_US, es_ES, fr_FR). Easily extensible for additional locales.
Optimized with HikariCP connection pooling and multi-level caching strategy for exceptional throughput and low latency.
Automatic audit logging for all operations. Track who did what, when, and from where with comprehensive audit service.
Clean separation of concerns with well-defined layers for maintainability and scalability.
Velocity Templates • JSON API • 80+ Templates
IP Block → Rate Limit → Locale → Auth → CSRF → Authorization
FrontController Pattern • ActionRegistry • 131 Actions
37 Services • SecurityService • AuthorizationService • RLS/CLS Interceptors
26+ DAOs • GalãoJDBC V6 Type-Safe SQL
HikariCP Connection Pool • Multi-Database Support
Enterprise-grade security with three complementary security layers working together to protect your data.
Define roles with specific permissions. Assign users to roles and control access to actions, modules, and features based on organizational hierarchy.
Restrict data visibility at the row level. Users see only the records they're authorized to access based on dynamic SQL conditions.
Control which columns users can see or modify. Hide sensitive fields like salaries, SSN, or confidential data based on role policies.
Connect to your preferred database vendor with a unified, type-safe API.
A modern, type-safe JDBC abstraction layer with fluent API for building complex SQL queries programmatically.
Write SQL queries using a fluent, type-safe API. Benefit from compile-time validation, IDE auto-completion, and protection against SQL injection.
// Type-safe query with fluent API var query = GalaoQueryBuilder.derby("SALES") .select( ProductsRecord.NAME, ProductsRecord.SALEPRICE, AggregateField.count(ProductStockRecord.WAREHOUSEID) .as("warehouse_count") ) .from(ProductsRecord.class) .autoJoin(ProductStockRecord.class) .where(ProductsRecord.ISACTIVE, true) .and(ProductsRecord.SALEPRICE, OperatorV1.GT, new BigDecimal("50")) .groupBy(ProductsRecord.NAME, ProductsRecord.SALEPRICE) .having(AggregateField.count(ProductStockRecord.WAREHOUSEID), OperatorV1.GT, 2) .orderBy(ProductsRecord.NAME) .limit(10) .buildQuery();
Fluent interface for progressive query construction with method chaining.
Automatic JOIN resolution based on foreign key relationships.
Built-in LRU cache for joins, primary keys, and compiled SQL.
Full Jackson integration for query state persistence and transfer.
Get started with GalaoSystem today and accelerate your development workflow with built-in security, multi-database support, and low-code capabilities.