Only project creators and their users can post comments.

This is very clever!