Instead of plucking paths, and doing LIKE/OR on each of them, use a subquery to
find groups that are the ancestor of the projects the user is member of.