Permission to write to project must be checked for specific user

above method `can_read` should implement the same.