Use a custom ProjectParser#nodes_visible_to_user function so that the user permissions for all project references can be checked together