616 hide projects without permissions

closes #616
Actually, I think we can put the whole filter clause in a function, probably in the project helper namespace