Definitely refactor this into `before_filter`.

    before_filter :must_be_creator, :only => [:edit, :update, :destroy]

    ...

    private
    def must_be_creator
        @project = Project.find(params[:id]) # notice how we set @project here, and don't need to do it later
        redirect_to @project unless @project.user == current_user
    end