I have a user who is in a role to create projects. But he could only do so only for certain projects that meet a test. At the moment I have a stores table where he has full access which is one to many with projects. In projects table there is a field, say development type, which holds values which determine whether he could create a project. How do I ensure that he could only save the project that meets certain conditions in Projects table? I tried form rules but despite putting these in place, when testing for his role, I could create the project. Is there a straight forward approach to administer these limitations?