It's better let each project have the separate right, and no one can view the project if he/she doesn't belong the project. The update/action right for the project needs separate profile to define it.