WIP: project restriction role