restrict access to project