Make build views protected too
Clean up use of project.versions.public(user) to always pass a project