Enforce personal projects creation limits at lower level

There were cases where actual project creation rights weren't properly tested in CreateService. Also, our logic to find out if a given user has any creation rights (governing the "New project" menu item) didn't take into account the fact that Groups can be configured to require at least Maintainer rights.

Closes #361 (closed). Some of it should maybe be discussed upstream.

Merge request reports

Loading