noaccess isn't always set for hidden projects, so check directly #281