added restrict to viewing project for users with permission