# Change: Add Permission Enhancements for Manager and Cross-Department Access

## Why
Department managers cannot view their subordinates' workload data, preventing effective resource allocation decisions. Additionally, cross-department project collaboration is hindered because project members from other departments may be denied access.

## What Changes
- Enable department managers to view workload data of their department members
- Add project membership model to support cross-department collaboration
- Enhance access control to check project membership in addition to department

## Impact
- Affected specs: resource-management
- Affected code:
  - `backend/app/api/workload/router.py` - Manager access logic
  - `backend/app/middleware/auth.py` - Access control checks
  - `backend/app/models/` - New project_members model (optional)