When a user? is given access to a project, he is assigned a role within that project. The role dictates the permissions of the user.
There are four kinds of roles in the database: