Set up polymorphic association for projects
Make projects only visible to users with permission to see them