We are developing an synchronization of projects between Redmine and another application with the usage of the Redmine REST-API. Now we have noticed that only if you take the API key of an Administrator you get a list of all projects. Otherwise you only get the list of projects you are involved in.

But using an Administrator as API-User is a security risk.

It would be nice if there could be added a new permission for viewing all projects. This would not only be good for the API but also for the project management.