Add permission model for storing authorization

Projects are only visible to users with permission to see them.
Create a new test helper for granting authorization to specific user to
a specific task. The test related to projects now require users to be
authorized first.