add access check for project