Make projects only visible to users with permsission to see them
Don't show projects that a user doesn't have permission to see
Restrict reading tickets to correct project scope
non-working code