Goal:

• We'll need to modify queries or matches or prevent access to certain endpoints based on user's project and roles. Most of the endpoints should be guarded by 2 policies giving 2 types of access. Elevated access will provide access without any modifications or tenancy enforcement, while non-elevated access will give access to metrics from the current project only. By default users with the admin role are able to get elevated access.

Acceptance Criteria:

• Only metrics from the current project are accessible for non-admin users
• All metrics are accessible for admin users
• The access is configurable through policies