Enforce personal projects creation limits at lower level
There were cases where actual project creation rights weren't properly tested in CreateService
. Also, our logic to find out if a given user has any creation rights (governing the "New project" menu item) didn't take into account the
fact that Groups can be configured to require at least Maintainer rights.
Closes #361 (closed). Some of it should maybe be discussed upstream.