New role - Contractor (2012 SP2)

QUESTION:
I need to create a new Role for a Contractor, however the requirements are quite stringent and I am unsure what fields would be best to enable/disable.

Requirements:
- View only requests/projects assigned to them
- Able to submit time
- Not able to search or view any client information

If you have any best practices/guidelines for these kinds of role creation please let me know

ANSWER:
It can be done easily for projects, but for requests it's not as straightforward. Give the user the following features:

View projects, track project-related time: the user can see projects for which s/he has a task assignment and book project time. S/he will be able to see the name of the customer/engagement associated to the projects s/he is assigned to (but will not be able to link to the profile page), but cannot see other customers.

Edit requests, track request-related time (if contractors should be able to book request time as well as project time): the user can see and edit all requests s/he has access to, so the customer could set up support desks that are restricted to people who are not contractors. All requests are associated with those support desks except for requests assigned to contractors, which can be moved to another, un-restricted support desk.