restrict deletion of projects/data (fixes #36)