1. Only people with access can check access on the project 2. The JSON contain ONLY access to a specific project