Project member resolver may return both ProjectMember and GroupMember
members - the old :read_project permission was not accurate and didn't
work fo GroupMember