Proper Authorization in projects