staff can only show own projects