Apply permissions

@noahsark769 can you check this pr? I pass tests locally but I'm failing a bunch on remote. This could be due to me disconnecting the revolvuserprofile signal. 
Nitpick: So that parentheses match up in a readable way, I would format it as:

```python
completed_projects = queryset.filter(
    project_status=Project.COMPLETED
).order_by("end_date")
```