Restrict project write access to owner