checks if the current user belongs to the project