Lock down specific projects controller actions only