Don't allow editing or deleting of components from other projects.
Added no permission JSON view.
Added 403 and 404 headers to API response.
Show no permission instead of 404 for custom fields of other projects.
Custom fields can now be fetched via the API.
Custom fields can now be created via the API.
Custom fields can now be updated via the API.
Custom fields can now be deleted via the API.
Project members can now be fetched via the API.