Fix project permissions: anybody in org could see the list of projects

[nmanovic]

Motivation and context

All in organization could see the list of projects due to incorrent filter definition in the rules (it cannot be covered by opa tests and Django tests are not here yet).

How has this been tested?

Manually

Checklist

• I submit my changes into the develop branch
  - [ ] I have added a description of my changes into CHANGELOG file
  - [ ] I have updated the documentation accordingly
  - [ ] I have added tests to cover my changes
  - [ ] I have linked related issues (read github docs)
  - [ ] I have increased versions of npm packages if it is necessary (cvat-canvas,
  cvat-core, cvat-data and cvat-ui)

License

• I submit my code changes under the same MIT License that covers the project.
  Feel free to contact the maintainers if that's a concern.
• I have updated the license header for each file (see an example below)

# Copyright (C) 2022 Intel Corporation
#
# SPDX-License-Identifier: MIT