My current site contains entity type project and entity type project content. The project content references the project through an entityreference field.
I would like to use an access control system that grants access to specific projects, and when that access is granted, the user has also access to specific project content entity types.
I know that Organic groups uses a relationship approach in which the group membership is an entity, and there is a two level deep relationship between group content (or group member) and the group.
In my case I prefer the simple direct entityreference (one level relation) between content and project. This would serve simplicity and performance. If you would advise against that, please let me kow.
I would like to receive guidance on how to set up such permission system, and possibly your suggestions and recomendations based on your experience with a similar setup. Thank you.