Different types of authorization for client, core, admins

[Adam]

Currently all logged in users have access to all submissions, types, settings. The goal is to have clients log in to see their submissions. To do that, they need to have different levels of access.

Potential levels of access:

Client

• Access to submissions in which they are PI or submitter
• Potentially allow contacts read only access?

Core

• Admin: everything
• Submission types: manage submission types
• Submissions: view, edit submissions

Institution

• Admin: Add/Remove cores
• Manage: Assign core managers, admins