Custom PHI lists at site/project level

[hkethi002]

Fixes #944

Changes From #877

• Project phi field (required field when creating project)
  • if project.phi == true, projects can have custom phi list
  • if phi is disabled for project, it is the same as if everyone has phi-access and modifying custom-phi lists is not allowed
• New collection of custom phi list for projects and site-level default
  • Project admins can set project level lists, site admins can set site-level lists
  • New ProjectSettings handler for custom-phi and project templates logic, rules are also in the same file
  • can only set phi fields that are PHI_CANDIDATES (this is a hardcoded list)
  • User can selectively choose subfields of the candidates
• New decorator to check phi-access for POST and PUT methods
• GET
  • get_all uses site level default phi fields
• If tags/notes are marked as PHI,
  • should a non-PHI user be able to add? - Yes
  • view? No
  • modify? - Yes for own notes, tags cannot be modified
  • delete? - Yes for own notes, no(?) for tags, but we'll allow for now.
• New AccessType modify-phi-list

ToDo

• [x] Project phi field that enables phi functionality

• [x] Subfields of PHI_CANDIDATES need to be permitted as phi fields

• [x] Log changes made to custom phi lists

• [x] Add more tests

• [x] Redo the phi logic for list handlers (Notes and Tags)

  Review Checklist

• Tests were added to cover all code changes

• Documentation was added / updated

• Code and tests follow standards in CONTRIBUTING.md

[codecov-io]

Codecov Report

:exclamation: No coverage uploaded for pull request base (PHI-perm-three@406ac2d). Click here to learn what that means. The diff coverage is 92.33%.

@@                Coverage Diff                @@
##             PHI-perm-three     #991   +/-   ##
=================================================
  Coverage                  ?   91.17%           
=================================================
  Files                     ?       51           
  Lines                     ?     7049           
  Branches                  ?        0           
=================================================
  Hits                      ?     6427           
  Misses                    ?      622           
  Partials                  ?        0

[nagem]

Closing PR for now as requirements for this enhancement are reworked within the team.