Policy-based project membership

[henxing]

Managing individual users' project memberships (both at creation and ongoing) is currently a very manual process, requiring manual addition in all cases. Other service providers have a concept of security policies, where permissions can be granted to a policy and users are assigned one or more policies to manage their access permissions. This should include the ability to specify "wildcard" permissions, meaning access to all projects, current and future, in an organization.