Limit post and edit permissions to leads and leadership

[travissouthard]

Overview

The site had initially been set up with the idea of being like a wiki and editable by any logged in user. This has been a large attack surface for link spammers for some time now. So we want to limit the ability to post new projects and edit them to be limited specifically to project leads ("staff" level) and leadership ("admin" level), to ensure what is being posted is genuine.

Fixes

In order to post a new project they must be at least "Staff" level which means that an admin will have elevated a trusted volunteer to have that status within the site. Without that a user would not be able to see or make that request.

[themightychris]

This is a solid fix. Only removes the buttons from the frontend but that's probably good enough and it's done the right way, thanks for separating the import and edit commits.

I can't get this deployed though until I cook up a new base image that works around the Habitat rugpull :-(

Removing myself as reviewer for the moment so I stop getting a notification every day