Set access permissions for User and Project

User is allowed to get info about other users only if they are connected via project.
User can change project info (title, body fields) only if he is the author of the project. Subscribers have read-only access to those fields