Updated test cases w.r.t to review meeting with Peter Walsh and @dnahodi...

...l.

Broadly:

* changed application of "protection" to be at the project level, rather than at the release level (as this is what the policy actually states);
* added explicit test cases for filtering (as this has been the source of some bugs in the past).