Security

The TNO solution will use Oauth 2.0 and Open ID Connect to ensure users are securely authenticated. Membership identity will be maintained through Roles and Claims, which will enable the various features within the TNO solution.

The Security solution has not yet been fully designed or implemented.

Users and Roles

Role	App	Characteristic	Description
Administrator	Editor App	TNO employee - backend user, rarely accesses frontend	User management, Data source management
Editor	Editor App	TNO employee - backend user, rarely accesses front end	To modify media content to produce and distribute effective, timely & efficient products within the bounds of TNO's copyright agreements
Refiner	Subscriber App	direct user - PAO - report builder, heavy desktop user	with as little effort as possible, I want to access and assemble TNO content for daily reports, research reports and analysis to be relayed to Planners or Producers. Maybe expert TNO user in their office
Planner	Subscriber App	direct user - comm dir - heavy user - mobile & desktop	receive all relevant TNO content in the most useful, timely & effective manner.
Producer	Subscriber App	direct user - Min, DM, ADM - mobile, alerts, rare if ever desktop user	receive targeted, focused, minimized TNO content in the most useful, timely & effective manner, including media analysis.
Consumer	Subscriber App	indirect user - line ministry employee - receives one TNO report per day	receive all the daily, issue-specific TNO content $500 per year can buy