title: Same resource with different rights in REST API
body: <p>I have a project management application where users can create services (time services, expenses, material) on projects. In the app, user rights for project management can be defined:</p>
  <ul>
  <li>no access</li>
  <li>read only on all projects</li>
  <li>read/write on all projects</li>
  </ul>
  <p>For creating services projects are visible to users independent on project rights, but instead dependent on project membership.</p>
  <p>What is the best way to implement these use cases in a REST-API?
  How to distinguish whether projects should be returned</p>
  <ul>
  <li>depending on the user rights</li>
  <li>depending on project membership</li>
  </ul>
  <p>Remark: The user is authenticated as app user and his permissions for the app are known</p>
  <ol>
  <li>One resource <em>projects</em>, one GET endpoint and distinguish by a parameter</li>
  <li>One resource <em>projects</em>, two GET endpoints with different parameters</li>
  <li>Two resources <em>projects</em> and <em>projectsforservicerecording</em></li>
  <li>Two resources <em>projects</em> and <em>projects/forservicerecording</em></li>
  <li>Two resources <em>projects</em> and <em>me/projectsforservicerecording</em></li>
  <li>?</li>
  </ol>
  <p>Thanks!</p>