Fix user permission on Projects API

[Aadesh-Baral]

fixes #5047 and other permission issues on API.
It Fixes the following permission issue:

Function	Current Permission	Changes Permission to
Adds a comment to the task outside of mapping/validation	Blocked users can also add a comment outside of mapping/validation	Blocked users have read-only access
Send messages to all contributors of a project at once	Any user	Limited to TM Admins, Org Admins, Project Author, and Teams with PM, access
Set a project as featured	Any user	Limited to TM Admins, Org Admins, Project Author, and Teams with PM, access
Unset a project as featured	Any user	Limited to TM Admins, Org Admins, Project Author, and Teams with PM, access
Creates a relationship between project and interests	Any user	Limited to TM Admins, Org Admins, Project Author, and Teams with PM, access
Assign a campaign for a project	Any user	Limited to TM Admins, Org Admins, Project Author, and Teams with PM, access
Delete a campaign for a project	Any user	Limited to TM Admins, Org Admins, Project Author, and Teams with PM, access
Assign a team to a project	Manager of any team	Limited to TM Admins, Org Admins, Project Author, and Teams with PM, access
Update the role of a team on a project	Manager of any team	Limited to TM Admins, Org Admins, Project Author, and Teams with PM, access
Deletes the specified team project assignment	Manager of any team	Limited to TM Admins, Org Admins, Project Author, and Teams with PM, access
Map all tasks on a project	Any user	Limited to TM Admins, Org Admins, Project Author, and Teams with PM, access
Validate all mapped tasks on a project	Any user	Limited to TM Admins, Org Admins, Project Author, and Teams with PM, access
Invalidate all mapped tasks on a project	Any user	Limited to TM Admins, Org Admins, Project Author, and Teams with PM, access
Set all bad imagery tasks as ready for mapping	Any user	Limited to TM Admins, Org Admins, Project Author, and Teams with PM, access
Reset all tasks on the project back to ready, preserving history	Any user	Limited to TM Admins, Org Admins, Project Author, and Teams with PM, access

[Aadesh-Baral]

Found the same issues on other Projects APIs. So this PR needs an update to address them as well. Drafting this for now

[sonarcloud]

Kudos, SonarCloud Quality Gate passed!   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
1 Code Smell

No Coverage information
0.0% Duplication