I would like to make sure that users for each project only have the appropriate view or view & edit permissions to their own project.
Some of the users might be on only one project, but some might need access to more than one project.
I was thinking about creating two roles for each project one for view only, and one for view and edit. Then if a user needs more than one project I would just add the additional project role whether they need view or view and edit, but I don't know if that is the best way that will require the least work from me going forward. Is there a better way?