Add permissions to change state in project policy

This is going to be used in the API.