TW-29003 After review fixes
1) Recursive -> iterative project path traversal
2) Tests
Simplified permissions check