new project permission for customers

[blockisec]

Give a brief summary

customers should mostly have read-only permissions. however, they should at least have permissions to:

• comment on findings
• create preview documents (or draft documents?)

Additional Information

No response