Enhancement: add observer groups to project manager projects, such that

anyone who is not in the observer group cannot view the project or see
it in the project list.  Some associated refactoring of project manager
permissions.  Schema change to accommodate the new data.

docs/changelog/7.x.x.txt

@@ -49,6 +49,7 @@
  - fix: makePrintable operation with other styleId
  - fix: RandomThread macro not working properly.  Only CS's with more than one thread are considered for the random search
  - new: Tasks in the Project Management can now be assigned non-work lag time that is added to the main work duration of the task.
+ - new: Projects in the Project Management asset can now be assigned observer groups; users who are not in the observer group cannot view any aspects of the project.
 
 7.0.6
  - fix: Error in DateTime.pm

docs/upgrades/upgrade_7.0.6-7.0.7.pl

@@ -24,6 +24,7 @@ my $session = start(); # this line required
 dropLineageInAssetIndex($session);
 giveTasksMultipleResources($session);
 giveTasksLagTime($session);
+giveProjectsObserverGroup($session);
 
 finish($session); # this line required
 
@@ -80,6 +81,16 @@ EOT
 				   );
 }
 
+sub giveProjectsObserverGroup {
+	my $session = shift;
+	print "\tGiving projects observer groups.\n" unless $quiet;
+	$session->db->write($_) for(<<'EOT',
+  ALTER TABLE PM_project
+   ADD COLUMN projectObserver varchar(22) character set utf8 collate utf8_bin DEFAULT '7';
+EOT
+				   );
+}
+
 # ---- DO NOT EDIT BELOW THIS LINE ----
 
 #-------------------------------------------------