Fix permissions for viewing attachments and comments on board.
Allow delegating user authorization to project' owner.

Add a notion of 'owner' of a project. The owner of the project has
permissions to manage the authorized users on a project.