Function ensure_visible 

pub fn ensure_visible(
    actor: &Actor,
    project_id: Option<Uuid>,
    not_found: AppError,
) -> Result<(), AppError>

Fails with the regular “not found” error unless the actor may read the project group. not_found is the exact error a missing object gives.