Feature #3977
It must be checked which endpoints need to be included: ``` ruby accept_api_auth :index, :show, :create, :update, :destroy, :archive, :unarchive, :close, :reopen ``` Some may still be accessible via `projects`. There is a new `ProjectAdminQuery` class which needs to be considered too and may require a separate issue.