Restrict users have permissions can view a project