secured project controllers additionally by user property isProjectCreationAllowed