Fixes #36: Restrict project management access to project creator