I guess, based on what you are saying, that your are storing full files
as records in the database? That's rather unconventional, but I guess
not impossible. I don' think SQL Server has record level security
(since each file would be a record). Check with your SQL Server
admininstrator and/or the DBA.
More conventionally you would store the project data in a SQL server
database specific for Project. Again, security can be applied. Check
with your SQL Server administrator and/or the DBA.
Hope this is useful to you. Let us know.
rms