I believe the answer is a bit more complicated than a yes or no. It is my understanding that if the site includes a list or view of Project Server data than you need a CAL. If it is just the project site with information (like risks, issues, and other lists), than the user does not need a CAL. In other words, they would need a CAL if you included Project Server web parts or other custom web parts pulling data from Project Server. The BI site would require a CAL. I would be interested in hearing if someone has another view or if things have changed. Hope that helps…
Is it necessary for every person who may need access to the project workspace to be issued a Project Server CAL or are the CALS only to be used for access via PWA?