Implement a system of permissions & roles for managing write access to projects and the use of specific features. All related objects have permissions checks to ensure they belong to a project that a user has permission to access. Consider adding Organization level permissions & private projects instead of grouping by User (discuss).