If repo.projects unit is disabled, it's still shown in user profile page

[pmandalka]

Description

I'm using the DISABLE_REPO_UNITS to disable the projects unit. In most places, the project links are removed but in the user profile, the link still exists.

Clicking on that, leads to a 404 page

Screenshots

Gitea Version

1.20

Can you reproduce the bug on the Gitea demo site?

No

Operating System

Docker on Debian

Browser Version

Chrome 114

[Zettat123]

When repo.projects is disabled, clicking links of user-level projects and org-level projects leads to 404 page.
Since DISABLED_REPO_UNITS is used to control repo-level units, I think we need to fix the project unit checks (including reqUnitAccess(unit.TypeProjects, ...) and repo.MustEnableProjects) for user/org level projects.

gitea/routers/web/web.go

Lines 833 to 864 in 24b49bc

	m.Group("/projects", func() {
	m.Group("", func() {
	m.Get("", org.Projects)
	m.Get("/{id}", org.ViewProject)
	}, reqUnitAccess(unit.TypeProjects, perm.AccessModeRead))
	m.Group("", func() { //nolint:dupl
	m.Get("/new", org.RenderNewProject)
	m.Post("/new", web.Bind(forms.CreateProjectForm{}), org.NewProjectPost)
	m.Group("/{id}", func() {
	m.Post("", web.Bind(forms.EditProjectBoardForm{}), org.AddBoardToProjectPost)
	m.Post("/delete", org.DeleteProject)
	m.Get("/edit", org.RenderEditProject)
	m.Post("/edit", web.Bind(forms.CreateProjectForm{}), org.EditProjectPost)
	m.Post("/{action:open|close}", org.ChangeProjectStatus)
	m.Group("/{boardID}", func() {
	m.Put("", web.Bind(forms.EditProjectBoardForm{}), org.EditProjectBoard)
	m.Delete("", org.DeleteProjectBoard)
	m.Post("/default", org.SetDefaultProjectBoard)
	m.Post("/unsetdefault", org.UnsetDefaultProjectBoard)
	m.Post("/move", org.MoveIssues)
	})
	})
	}, reqSignIn, reqUnitAccess(unit.TypeProjects, perm.AccessModeWrite), func(ctx *context.Context) {
	if ctx.ContextUser.IsIndividual() && ctx.ContextUser.ID != ctx.Doer.ID {
	ctx.NotFound("NewProject", nil)
	return
	}
	})
	}, repo.MustEnableProjects)