On ECINet platform, access for States can be switched off and on centrally: report

The audit found that ECINet has account-level controls for State Nodal Officers, or SNOs. Officials can be created, managed, updated, or disabled through a dedicated management area. This matters because disabling an SNO appears to remove the user’s application access entirely, rather than merely changing one permission.

The SNO module sits behind the official login. Each SNO row has a disable button. Its confirmation message says the user will no longer be able to access the application. A separate code message says, “View enumeration form details is not enabled for selected State.” That feature can be enabled or disabled State by State.

The audit therefore identified both a full account block and a State-level viewing switch. The article does not establish who controls these settings or whether they have been used. It says the findings matter amid objections to centralisation of ECINet and the electoral-roll database.

ECINet is the Election Commission of India’s comprehensive digital platform and unified portal for officials. Its purpose, as described in the article, is to connect several election-administration tools under one official login. That makes it important because access to multiple functions can be managed through a common system rather than separate applications.

The portal joins user management, ERONET, the RTI module, and the Enumeration Form Tracker for the Special Intensive Revision, or SIR. Officials sign in through the Official Login option. After signing in, they can see features and options that are not visible to ordinary visitors.

ECINet was launched in January 2026, although the article does not give a complete list of every connected function. Its front-end code also contains labels, screen routes, and API paths for some official features. The platform’s unified design is central to concerns raised about centralisation of election technology and electoral-roll data.

The article presents ECINet as a platform intended to unify election administration across India. It has a State Nodal Officer module, State-by-State enumeration-form settings, and connected tools for user management, ERONET, RTI, and SIR’s Enumeration Form Tracker. This combination gives the system a potentially broad administrative reach.

The audit found that State access is represented inside one portal. An SNO can be managed through ECINet, while enumeration-form viewing can be enabled or disabled for a selected State. The same environment also includes features affecting Electoral Registration Officers and Assistant EROs in West Bengal.

However, the article does not provide the total number of States, officials, SNOs, EROs, AEROs, or modules connected to ECINet. It therefore supports a description of nationwide design and State-level reach, not a precise scale estimate. The implications depend on how widely the platform is deployed and how its permissions are administered.

When a State Nodal Officer is disabled, ECINet displays a warning that the user will no longer be able to access the application. The audit interprets this as a full account-level block. It says the confirmation text does not describe a partial restriction or a downgrade to another role.

Enumeration-form access works differently. The code can check whether viewing is enabled for the selected State. If it is not enabled, the official sees the message, “View Enumeration Form Details is not enabled for selected State,” instead of the form details. This is a State-level feature switch.

Together, these controls separate user access from feature access. One can disable the SNO’s account, while the other can restrict viewing for a State without necessarily describing an account suspension. The article does not say why a State setting would be changed or whether either control has been used in practice.

State Nodal Officers are State-level officials who receive and manage access within ECINet. In this article, their clearest role is administrative: the platform can create, update, manage, and disable their accounts. The article does not provide a formal job description for SNOs.

Electoral Registration Officers, or EROs, are officials responsible for electoral-roll work, including decisions about voter registration and roll maintenance. Assistant EROs, or AEROs, support EROs in that work. The article specifically says ECINet can bar EROs and AEROs in West Bengal from reviewing enumeration forms and viewing the notice-and-hearing dashboard.

These role descriptions for EROs and AEROs use established election-administration knowledge; the article itself gives only limited detail. It does state that EROs have statutory authority over the electoral roll. That legal authority is why claims that a central IT system could override their safeguards are politically significant.

Front-end JavaScript is code sent to a browser so a website can display screens and respond to user actions. Because the browser must receive that code, anyone may be able to inspect files that a site serves publicly. The code can contain names for menus, screens, routes, and calls to back-end services.

The Charchagram audit found that ECINet’s login page loads a large JavaScript file before authentication. Some of its contents included labels, menu names, screen routes, and API paths intended for officials. The auditor said this allowed him to understand parts of features that normally sit behind the login.

Seeing these references does not necessarily grant access to the underlying records. It can reveal how the application is organised and what functions exist. The article’s concern is that details of restricted features were exposed in public front-end code. It does not report that the audit changed records or bypassed authentication.

An electoral roll is the official register of people entitled to vote in a particular electoral area. It contains voter records used to determine who may participate in an election. Keeping the roll accurate involves adding eligible voters, correcting details, and removing or updating records when legally required.

Electoral Registration Officers, or EROs, are the officials legally responsible for this work. Their authority allows decisions about voter records to be made through a defined statutory process, with accountability for notices, objections, hearings, and final entries. Assistant EROs support that administration under the relevant framework.

The article does not explain the full legal structure or list every ERO power. It does state that EROs have statutory authority over the electoral roll. That point matters because Congress alleged that ECINet and the Election Commission’s IT division had overridden or violated these safeguards. The audit also identified access restrictions affecting EROs and AEROs in West Bengal.