Owner/collab read permissions for Project Preferences about panoptes

[zwolf]

It would probably be OK to expose any/all of the other ProjectPreference fields to owner/collabs.

Is this the feature you'd like to see added? For a given project, instead of "owners/collabs can write project_preferences.settings only", the policy should be "owners/collabs can read and write project_preferences as though they were the user"? I don't see an issue with that, the only other contents are the ones you described above as well as some counts (activity_count, activity_count_by_workflow).

[lcjohnso]

Zach & Cliff had conversation on 2023-10-19:

• Simplest path forward: enable read permission on ProjectPreferences.settings only.
  • One main reason for this: write permissions for project owner/collab are limited to ProjectPreferences.settings for write permissions, so keeping consistency for read actions probably makes sense.
• Cliff would be totally OK if Zach prefers either the "settings only" vs. "whole ProjectPreferences object" implementation for read permissions. Write permissions use a new, separate endpoint, so implementing the more restrictive scope might be more annoying / complex. While none of the other fields (e.g., email_communication, preferences) were meant to be seen by project owners, perhaps it isn't bad to show these (and at times, maybe there's an advantage; for example, access to preferences would allow project teams to query whether a person has seen and/or completed the minicourse).
  preferences
• Zach will think about how much trouble it would be to strip out and only serialize desired fields from the show.

Stretch Goal: mirroring the function for writing to settings, the MVP version of this capability would require project teams to know the user ID and would require teams to loop through each user individually. A nice-to-have (but definitely NOT a MVP feature) would be the ability to query all user project preferences by project ID, returning info on those who have classified (email_communication is not null).