JRC Portal Internal tools, intake, and project coordination Public site marketing layer

JRC internal portal

A calmer front door into the internal tools that keep JRC running.

The public site should tell the story clearly. The portal should do the opposite of storytelling: it should get approved people to the right operational tool, quickly, with less confusion and less noise.

Protected portal target
Login will require Google auth plus JRC access-group membership.

This public shell is the future launcher. Once Cloudflare Access is attached, it becomes the calmer front door into the internal Apps Script tools.

Auth target Google login + JRC access group
Current architecture Cloudflare launcher, Apps Script backend
Operational stance Practical, protected, and low-drama

Active launchers

The portal should expose only the internal tools people actually need.

These cards are the durable internal routes: project update, intake, and admin surfaces that belong behind a login rather than on the public website.

How access will work

Portal access should match real operational access.

The cleanest model is to treat the JRC folder-access group as the portal-access group too. That way Google login, Drive access, and Cloudflare entry all point to the same underlying membership decision.

Cloudflare Access in front Google auth required Drive group as source of truth
Portal rules of thumb
  • Cloudflare Access will become the first gate: Google login required.
  • Membership will mirror the JRC folder access group so portal access and Drive access stay aligned.
  • The launcher will route into Apps Script until the internal tools are worth rebuilding natively.

What this launcher is for

Keep internal work legible.

  • Project update and project lifecycle coordination
  • PI intake and leadership-facing operational setup
  • Student intake routing after admissions
  • Admin and repair helpers that should never live on the public site

What this launcher is not for

Do not turn the portal into the public website.

  • It should not explain the whole mission from scratch.
  • It should not expose protected workflows to the general public.
  • It should not replace Google-backed operations until the backend is ready.
  • It should feel lighter and more utilitarian than the marketing site.

Upcoming portal surfaces

Visible placeholders for the next layer of internal resources.

These pages intentionally exist as starred placeholders so the architecture can grow without pretending unfinished work is already live.