eligible-users endpoint - restrict response fields

[ethanstrominger]

Dependencies

• eligible-users api - restrict to global admins and project admins #433
• eligible-users end point - define rows returned #394

Overview

Ensure users see only information they are privileged to see

Action items

• serializers.py: Restrict response fields based on either global admin relevant fields or project admin related fields. To do this, call PermissionValidation.get_fields(operation="read", permission_type=, table_name="user") This method was implemented by issue Implement field configurable security for global admin, project admin, and team member #346.
• tests: mock call to serializer that mocks requesting user, obj, and project id parameter.