ability to restrict access to forms based on project membership