Section 8.1.5: Make projects only visible to users with permission to see them
Section 8.1.6: Handle authorization errors gracefully