Added a security control to check if the user belongs to the project