We should verify that users need 'change_business' to view and edit a business, and similarly for projects.