users can only see projects that they are members on
users cannot see tasks or memberships that they are not assigned to