Access policy defaults proposal - which policies should be created by default for each project?

[reshmakh]

Goal is to prepare for V4 - where AccessPolicies will be required by default on all ProjectMembership

Currently, Access Policies need to be created and applied to each ProjectMembership.

Consider setting up default access policies for each project as part of initialization.
Consider requiring project memberships to have an AccessPolicy

[reshmakh]

Proposal: we should enable 3 default access policies for all new projects:

1. Patient - use this as default access policy
2. Admin - Read/Write all project resources
3. Practitioner - Read/write all clinical resources, but no Medplum specific resources

Todo: create policies

[codyebberson]

I recommend splitting "Practitioner" into "MD" and "non-MD". Not sure how we should name those.

[rahul1]

Proposed default access matrix:
https://docs.google.com/spreadsheets/d/1xdMuS0mDPHOokJu9XZoIPpd1r_ATd1EahvI0K5P39n4/edit?usp=sharing