add staff:boolean to users, correct Project scopes and config Project#index view for staff