so like your resources's

view

permission could be calculated as

project->resource_viewer

, then your role would only have to be associate with the project resource viewer, and that would apply to all resources under the project automatically