Restricting access to projects based on reporter permissions