Build secure online database that is fed by XML posts for orders and refunds

This is a straight forward project to create an online customer database - that can be updated/parsed with feeds sent to it by XML feeds online in a secure manner. The database will be fed by two XML feeds - similar in schema. BACK-END This can be secured by SSL and a password that comes while the XML feed is being sent out - so no bogus data goes to the database FRONT END ADMIN CONTROL There needs to be a admin console that controls the system We need to add other users (admin) and non-admin - with passwords and username We also need to control for each user - what details of a customer record they can access. For example, with some employees, we may want to restrict access to phone number or even email records, no search by date (default) We also want to log what a non-admin user is accessing, especially if its a high number of searches of the system. We don't want user to search by date - so that they can see all the orders from that day. If we can build system to include scripts that allow copying and pasting of certain data from the record view - such as a serial key or activation key, that would be useful SEARCH All users may need to search for a customer's details - such as by order number, email or even zip code This needs to be tight - as we want to restrict how many records come up as a security feature to prevent any copying/ harvassing of the data by any user, as data security is paramount. Hence no record view by data or allowing any search to be done for a single or a few letters, such as surname starting by letter 'a' for example SALES PERFORMANCE We need a way for users to enter sales that they have made - by marking an existing order on the system We need to then be able to generate reports for each user during any interval in the admin console MAINTENANCE We need to backup the data regularly and keep it clean, and other periodic maintenance I have attached some documents that provide background of the XML and some suggestions on how it may work Note, we already have existing system but we dont have the sales control or central monitoring on it, so a new system is required thanks Sam