projects only visible to users with permission for do so