I’ve looked around and it looks like the following is impossible:
Allow specific users to change specific projects.
So User A can change Project X and read every other project.
User B can change Project Y and read every other project.
User C can read every project but change nothing.
At best these would be project members, but it would be a first step if I could do this by manually by settings permissions. Apparently user permissions can’t add permissions, only restrain. So is that even possible ?