### Steps to reproduce

1. Open Begin of the deletion oneEnd of the deletion a page like `https://openproject.local/projects/demo-project/settings/project_storages/63/members`
2. If you Begin of the insertionare luckyEnd of the insertion Begin of the deletion likeEnd of the deletion with `project_storage_id` you will see members list.

### What is the buggy behavior?

Pages with routes like `/projects/{:project_id or :project_name}/settings/project_storages/:project_storage_id/members` can be accessed without a Begin of the insertionuser being logged in.End of the insertion Begin of the deletion session.End of the deletion

### What is the expected behavior?

Unauthorized user has no access to project storage members page.