Limit projects users can see

Don't show projects that a user doesn't have permission to see.
Restrict reading tickets to correct project scope