user->hasPerm('IDF.project-owner', $request->project)) { return true; } return new Pluf_HTTP_Response_Forbidden($request); } }