don't show project that user dont have permission'