Can security be applied at the project level?

Another approach would be to assign users a Security Role that represents their location. This is independent of your choice of authentication type) You would then write a “Startup Script” (in Global Event Scripts), that runs fpmi.security.getRoles to check their permissions. You might log them off (same script module) if they aren’t allowed to run the project in that location. This scheme allows users to be members of any number of locations.