Restrict visibility to projects the user has access to