Define authorized scope of projects for users

:+1: