[8-17 security fix] Renders 404 if given project is not readable by the user on Todos dashboard

See merge request !2136