Restricting to creating projects with users have permissions