add a check to ensure that this user belongs to this project or task
Merge branch 'master' of github.com:tiant167/upon