Scoping whitelisted methods output to projects and timesheets that are accessible to users

Restricts whitelisted method output to user-accessible projects and timesheets, preventing unauthorized data exposure.