From 8101256d4a32af456fec484ffb711f79a4717947 Mon Sep 17 00:00:00 2001
From: Tim Haasdyk <tim_haasdyk@sil.org>
Date: Wed, 17 Apr 2024 14:04:58 +0200
Subject: [PATCH] Add project confidentiality

---
 backend/LexBoxApi/GraphQL/ProjectMutations.cs |  19 +
 .../Models/Project/ChangeProjectInputs.cs     |   2 +
 .../Models/Project/CreateProjectInput.cs      |   1 +
 backend/LexBoxApi/Services/ProjectService.cs  |   7 +
 backend/LexCore/Entities/DraftProject.cs      |   1 +
 backend/LexCore/Entities/Project.cs           |   1 +
 ...ColumnToProjectAndDraftProject.Designer.cs | 857 ++++++++++++++++++
 ...fidentialColumnToProjectAndDraftProject.cs |  38 +
 .../LexBoxDbContextModelSnapshot.cs           |   6 +
 backend/LexData/SeedingData.cs                |   4 +-
 .../LexCore/Services/ProjectServiceTest.cs    |   6 +-
 frontend/schema.graphql                       |  20 +
 frontend/src/lib/app.postcss                  |   4 +-
 .../src/lib/components/Badges/Badge.svelte    |  10 +-
 .../lib/components/Badges/BadgeButton.svelte  |   7 +-
 .../src/lib/components/EditableText.svelte    |   2 +-
 .../src/lib/components/MoreSettings.svelte    |   4 +-
 .../ProjectConfidentialityCombobox.svelte     |  25 +
 .../ProjectConfidentialityFilterSelect.svelte |  22 +
 .../components/Projects/ProjectFilter.svelte  |  33 +-
 .../components/Projects/ProjectTable.svelte   |  33 +-
 frontend/src/lib/components/Projects/index.ts |   1 +
 .../src/lib/email/CreateProjectRequest.svelte |   5 +-
 frontend/src/lib/forms/Checkbox.svelte        |  18 +-
 frontend/src/lib/i18n/locales/en.json         |  20 +
 frontend/src/lib/type.utils.ts                |   5 +
 frontend/src/lib/util/query-params.ts         |   6 +-
 .../src/routes/(authenticated)/+page.svelte   |   2 +-
 frontend/src/routes/(authenticated)/+page.ts  |   1 +
 .../routes/(authenticated)/admin/+page.svelte |   3 +
 .../src/routes/(authenticated)/admin/+page.ts |   4 +
 .../admin/AdminProjects.svelte                |   5 +-
 .../project/[project_code]/+page.svelte       | 113 ++-
 .../project/[project_code]/+page.ts           |  47 +-
 .../[project_code]/OpenInFlexModal.svelte     |   6 +-
 .../ProjectConfidentialityBadge.svelte        |  26 +
 .../ProjectConfidentialityModal.svelte        |  51 ++
 .../project/create/+page.svelte               |   9 +
 .../src/routes/email/tester/+page@.svelte     |   7 +-
 frontend/tests/fixtures.ts                    |   3 +-
 40 files changed, 1328 insertions(+), 106 deletions(-)
 create mode 100644 backend/LexData/Migrations/20240425121912_AddIsConfidentialColumnToProjectAndDraftProject.Designer.cs
 create mode 100644 backend/LexData/Migrations/20240425121912_AddIsConfidentialColumnToProjectAndDraftProject.cs
 create mode 100644 frontend/src/lib/components/Projects/ProjectConfidentialityCombobox.svelte
 create mode 100644 frontend/src/lib/components/Projects/ProjectConfidentialityFilterSelect.svelte
 create mode 100644 frontend/src/routes/(authenticated)/project/[project_code]/ProjectConfidentialityBadge.svelte
 create mode 100644 frontend/src/routes/(authenticated)/project/[project_code]/ProjectConfidentialityModal.svelte

diff --git a/backend/LexBoxApi/GraphQL/ProjectMutations.cs b/backend/LexBoxApi/GraphQL/ProjectMutations.cs
index 36959f5c7..49ba58e5e 100644
--- a/backend/LexBoxApi/GraphQL/ProjectMutations.cs
+++ b/backend/LexBoxApi/GraphQL/ProjectMutations.cs
@@ -278,6 +278,25 @@ public async Task<IQueryable<Project>> ChangeProjectDescription(ChangeProjectDes
         return dbContext.Projects.Where(p => p.Id == input.ProjectId);
     }
 
+    [Error<NotFoundException>]
+    [Error<DbError>]
+    [UseMutationConvention]
+    [UseFirstOrDefault]
+    [UseProjection]
+    public async Task<IQueryable<Project>> SetProjectConfidentiality(SetProjectConfidentialityInput input,
+        IPermissionService permissionService,
+        LexBoxDbContext dbContext)
+    {
+        permissionService.AssertCanManageProject(input.ProjectId);
+        var project = await dbContext.Projects.FindAsync(input.ProjectId);
+        NotFoundException.ThrowIfNull(project);
+
+        project.IsConfidential = input.IsConfidential;
+        project.UpdateUpdatedDate();
+        await dbContext.SaveChangesAsync();
+        return dbContext.Projects.Where(p => p.Id == input.ProjectId);
+    }
+
     [Error<NotFoundException>]
     [Error<LastMemberCantLeaveException>]
     [UseMutationConvention]
diff --git a/backend/LexBoxApi/Models/Project/ChangeProjectInputs.cs b/backend/LexBoxApi/Models/Project/ChangeProjectInputs.cs
index 212ebad46..d6fed8c71 100644
--- a/backend/LexBoxApi/Models/Project/ChangeProjectInputs.cs
+++ b/backend/LexBoxApi/Models/Project/ChangeProjectInputs.cs
@@ -4,6 +4,8 @@ public record ChangeProjectNameInput(Guid ProjectId, string Name);
 
 public record ChangeProjectDescriptionInput(Guid ProjectId, string Description);
 
+public record SetProjectConfidentialityInput(Guid ProjectId, bool IsConfidential);
+
 public record DeleteUserByAdminOrSelfInput(Guid UserId);
 
 public record ResetProjectByAdminInput(string Code);
diff --git a/backend/LexBoxApi/Models/Project/CreateProjectInput.cs b/backend/LexBoxApi/Models/Project/CreateProjectInput.cs
index faf215ada..e97c6720d 100644
--- a/backend/LexBoxApi/Models/Project/CreateProjectInput.cs
+++ b/backend/LexBoxApi/Models/Project/CreateProjectInput.cs
@@ -11,5 +11,6 @@ public record CreateProjectInput(
     string Code,
     ProjectType Type,
     RetentionPolicy RetentionPolicy,
+    bool IsConfidential,
     Guid? ProjectManagerId
 );
diff --git a/backend/LexBoxApi/Services/ProjectService.cs b/backend/LexBoxApi/Services/ProjectService.cs
index 86c93679c..db8a3c0f8 100644
--- a/backend/LexBoxApi/Services/ProjectService.cs
+++ b/backend/LexBoxApi/Services/ProjectService.cs
@@ -17,6 +17,11 @@ public async Task<Guid> CreateProject(CreateProjectInput input)
     {
         await using var transaction = await dbContext.Database.BeginTransactionAsync();
         var projectId = input.Id ?? Guid.NewGuid();
+        /* TODO #737 - Remove this draftProject/isConfidentialIsUntrustworthy stuff and just trust input.IsConfidential */
+        var draftProject = await dbContext.DraftProjects.FindAsync(projectId);
+        // There could be draft projects from before we introduced the IsConfidential field. (i.e. where draftProject.IsConfidential is null)
+        // In those cases we can't trust input.IsConfidential == false, because that is the default, but the user will never have had the chance to pick it.
+        var isConfidentialIsUntrustworthy = draftProject is not null && draftProject.IsConfidential is null && !input.IsConfidential;
         dbContext.Projects.Add(
             new Project
             {
@@ -28,6 +33,7 @@ public async Task<Guid> CreateProject(CreateProjectInput input)
                 Type = input.Type,
                 LastCommit = null,
                 RetentionPolicy = input.RetentionPolicy,
+                IsConfidential = isConfidentialIsUntrustworthy ? null : input.IsConfidential,
                 Users = input.ProjectManagerId.HasValue ? [new() { UserId = input.ProjectManagerId.Value, Role = ProjectRole.Manager }] : [],
             });
         // Also delete draft project, if any
@@ -56,6 +62,7 @@ public async Task<Guid> CreateDraftProject(CreateProjectInput input)
                 Name = input.Name,
                 Description = input.Description,
                 Type = input.Type,
+                IsConfidential = input.IsConfidential,
                 RetentionPolicy = input.RetentionPolicy,
                 ProjectManagerId = input.ProjectManagerId,
             });
diff --git a/backend/LexCore/Entities/DraftProject.cs b/backend/LexCore/Entities/DraftProject.cs
index c405aaa57..257bf7eac 100644
--- a/backend/LexCore/Entities/DraftProject.cs
+++ b/backend/LexCore/Entities/DraftProject.cs
@@ -9,4 +9,5 @@ public class DraftProject : EntityBase
     public required RetentionPolicy RetentionPolicy { get; set; }
     public User? ProjectManager { get; set; }
     public Guid? ProjectManagerId { get; set; }
+    public required bool? IsConfidential { get; set; }
 }
diff --git a/backend/LexCore/Entities/Project.cs b/backend/LexCore/Entities/Project.cs
index 92f46b4f8..5758c0d29 100644
--- a/backend/LexCore/Entities/Project.cs
+++ b/backend/LexCore/Entities/Project.cs
@@ -15,6 +15,7 @@ public class Project : EntityBase
     public string? Description { get; set; }
     public required RetentionPolicy RetentionPolicy { get; set; }
     public required ProjectType Type { get; set; }
+    public required bool? IsConfidential { get; set; }
     public FlexProjectMetadata? FlexProjectMetadata { get; set; }
     public required List<ProjectUsers> Users { get; set; }
     public required DateTimeOffset? LastCommit { get; set; }
diff --git a/backend/LexData/Migrations/20240425121912_AddIsConfidentialColumnToProjectAndDraftProject.Designer.cs b/backend/LexData/Migrations/20240425121912_AddIsConfidentialColumnToProjectAndDraftProject.Designer.cs
new file mode 100644
index 000000000..8dffac4d0
--- /dev/null
+++ b/backend/LexData/Migrations/20240425121912_AddIsConfidentialColumnToProjectAndDraftProject.Designer.cs
@@ -0,0 +1,857 @@
+// <auto-generated />
+using System;
+using LexData;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Infrastructure;
+using Microsoft.EntityFrameworkCore.Migrations;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+using Npgsql.EntityFrameworkCore.PostgreSQL.Metadata;
+
+#nullable disable
+
+namespace LexData.Migrations
+{
+    [DbContext(typeof(LexBoxDbContext))]
+    [Migration("20240425121912_AddIsConfidentialColumnToProjectAndDraftProject")]
+    partial class AddIsConfidentialColumnToProjectAndDraftProject
+    {
+        /// <inheritdoc />
+        protected override void BuildTargetModel(ModelBuilder modelBuilder)
+        {
+#pragma warning disable 612, 618
+            modelBuilder
+                .HasAnnotation("Npgsql:CollationDefinition:case_insensitive", "und-u-ks-level2,und-u-ks-level2,icu,False")
+                .HasAnnotation("ProductVersion", "8.0.2")
+                .HasAnnotation("Relational:MaxIdentifierLength", 63);
+
+            NpgsqlModelBuilderExtensions.UseIdentityByDefaultColumns(modelBuilder);
+
+            modelBuilder.Entity("AppAny.Quartz.EntityFrameworkCore.Migrations.QuartzBlobTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<byte[]>("BlobData")
+                        .HasColumnType("bytea")
+                        .HasColumnName("blob_data");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup");
+
+                    b.ToTable("qrtz_blob_triggers", "quartz");
+                });
+
+            modelBuilder.Entity("AppAny.Quartz.EntityFrameworkCore.Migrations.QuartzCalendar", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("CalendarName")
+                        .HasColumnType("text")
+                        .HasColumnName("calendar_name");
+
+                    b.Property<byte[]>("Calendar")
+                        .IsRequired()
+                        .HasColumnType("bytea")
+                        .HasColumnName("calendar");
+
+                    b.HasKey("SchedulerName", "CalendarName");
+
+                    b.ToTable("qrtz_calendars", "quartz");
+                });
+
+            modelBuilder.Entity("AppAny.Quartz.EntityFrameworkCore.Migrations.QuartzCronTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<string>("CronExpression")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("cron_expression");
+
+                    b.Property<string>("TimeZoneId")
+                        .HasColumnType("text")
+                        .HasColumnName("time_zone_id");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup");
+
+                    b.ToTable("qrtz_cron_triggers", "quartz");
+                });
+
+            modelBuilder.Entity("AppAny.Quartz.EntityFrameworkCore.Migrations.QuartzFiredTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("EntryId")
+                        .HasColumnType("text")
+                        .HasColumnName("entry_id");
+
+                    b.Property<long>("FiredTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("fired_time");
+
+                    b.Property<string>("InstanceName")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("instance_name");
+
+                    b.Property<bool>("IsNonConcurrent")
+                        .HasColumnType("bool")
+                        .HasColumnName("is_nonconcurrent");
+
+                    b.Property<string>("JobGroup")
+                        .HasColumnType("text")
+                        .HasColumnName("job_group");
+
+                    b.Property<string>("JobName")
+                        .HasColumnType("text")
+                        .HasColumnName("job_name");
+
+                    b.Property<int>("Priority")
+                        .HasColumnType("integer")
+                        .HasColumnName("priority");
+
+                    b.Property<bool?>("RequestsRecovery")
+                        .HasColumnType("bool")
+                        .HasColumnName("requests_recovery");
+
+                    b.Property<long>("ScheduledTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("sched_time");
+
+                    b.Property<string>("State")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("state");
+
+                    b.Property<string>("TriggerGroup")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<string>("TriggerName")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_name");
+
+                    b.HasKey("SchedulerName", "EntryId");
+
+                    b.HasIndex("InstanceName")
+                        .HasDatabaseName("idx_qrtz_ft_trig_inst_name");
+
+                    b.HasIndex("JobGroup")
+                        .HasDatabaseName("idx_qrtz_ft_job_group");
+
+                    b.HasIndex("JobName")
+                        .HasDatabaseName("idx_qrtz_ft_job_name");
+
+                    b.HasIndex("RequestsRecovery")
+                        .HasDatabaseName("idx_qrtz_ft_job_req_recovery");
+
+                    b.HasIndex("TriggerGroup")
+                        .HasDatabaseName("idx_qrtz_ft_trig_group");
+
+                    b.HasIndex("TriggerName")
+                        .HasDatabaseName("idx_qrtz_ft_trig_name");
+
+                    b.HasIndex("SchedulerName", "TriggerName", "TriggerGroup")
+                        .HasDatabaseName("idx_qrtz_ft_trig_nm_gp");
+
+                    b.ToTable("qrtz_fired_triggers", "quartz");
+                });
+
+            modelBuilder.Entity("AppAny.Quartz.EntityFrameworkCore.Migrations.QuartzJobDetail", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("JobName")
+                        .HasColumnType("text")
+                        .HasColumnName("job_name");
+
+                    b.Property<string>("JobGroup")
+                        .HasColumnType("text")
+                        .HasColumnName("job_group");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("text")
+                        .HasColumnName("description");
+
+                    b.Property<bool>("IsDurable")
+                        .HasColumnType("bool")
+                        .HasColumnName("is_durable");
+
+                    b.Property<bool>("IsNonConcurrent")
+                        .HasColumnType("bool")
+                        .HasColumnName("is_nonconcurrent");
+
+                    b.Property<bool>("IsUpdateData")
+                        .HasColumnType("bool")
+                        .HasColumnName("is_update_data");
+
+                    b.Property<string>("JobClassName")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("job_class_name");
+
+                    b.Property<byte[]>("JobData")
+                        .HasColumnType("bytea")
+                        .HasColumnName("job_data");
+
+                    b.Property<bool>("RequestsRecovery")
+                        .HasColumnType("bool")
+                        .HasColumnName("requests_recovery");
+
+                    b.HasKey("SchedulerName", "JobName", "JobGroup");
+
+                    b.HasIndex("RequestsRecovery")
+                        .HasDatabaseName("idx_qrtz_j_req_recovery");
+
+                    b.ToTable("qrtz_job_details", "quartz");
+                });
+
+            modelBuilder.Entity("AppAny.Quartz.EntityFrameworkCore.Migrations.QuartzLock", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("LockName")
+                        .HasColumnType("text")
+                        .HasColumnName("lock_name");
+
+                    b.HasKey("SchedulerName", "LockName");
+
+                    b.ToTable("qrtz_locks", "quartz");
+                });
+
+            modelBuilder.Entity("AppAny.Quartz.EntityFrameworkCore.Migrations.QuartzPausedTriggerGroup", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_group");
+
+                    b.HasKey("SchedulerName", "TriggerGroup");
+
+                    b.ToTable("qrtz_paused_trigger_grps", "quartz");
+                });
+
+            modelBuilder.Entity("AppAny.Quartz.EntityFrameworkCore.Migrations.QuartzSchedulerState", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("InstanceName")
+                        .HasColumnType("text")
+                        .HasColumnName("instance_name");
+
+                    b.Property<long>("CheckInInterval")
+                        .HasColumnType("bigint")
+                        .HasColumnName("checkin_interval");
+
+                    b.Property<long>("LastCheckInTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("last_checkin_time");
+
+                    b.HasKey("SchedulerName", "InstanceName");
+
+                    b.ToTable("qrtz_scheduler_state", "quartz");
+                });
+
+            modelBuilder.Entity("AppAny.Quartz.EntityFrameworkCore.Migrations.QuartzSimplePropertyTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<bool?>("BooleanProperty1")
+                        .HasColumnType("bool")
+                        .HasColumnName("bool_prop_1");
+
+                    b.Property<bool?>("BooleanProperty2")
+                        .HasColumnType("bool")
+                        .HasColumnName("bool_prop_2");
+
+                    b.Property<decimal?>("DecimalProperty1")
+                        .HasColumnType("numeric")
+                        .HasColumnName("dec_prop_1");
+
+                    b.Property<decimal?>("DecimalProperty2")
+                        .HasColumnType("numeric")
+                        .HasColumnName("dec_prop_2");
+
+                    b.Property<int?>("IntegerProperty1")
+                        .HasColumnType("integer")
+                        .HasColumnName("int_prop_1");
+
+                    b.Property<int?>("IntegerProperty2")
+                        .HasColumnType("integer")
+                        .HasColumnName("int_prop_2");
+
+                    b.Property<long?>("LongProperty1")
+                        .HasColumnType("bigint")
+                        .HasColumnName("long_prop_1");
+
+                    b.Property<long?>("LongProperty2")
+                        .HasColumnType("bigint")
+                        .HasColumnName("long_prop_2");
+
+                    b.Property<string>("StringProperty1")
+                        .HasColumnType("text")
+                        .HasColumnName("str_prop_1");
+
+                    b.Property<string>("StringProperty2")
+                        .HasColumnType("text")
+                        .HasColumnName("str_prop_2");
+
+                    b.Property<string>("StringProperty3")
+                        .HasColumnType("text")
+                        .HasColumnName("str_prop_3");
+
+                    b.Property<string>("TimeZoneId")
+                        .HasColumnType("text")
+                        .HasColumnName("time_zone_id");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup");
+
+                    b.ToTable("qrtz_simprop_triggers", "quartz");
+                });
+
+            modelBuilder.Entity("AppAny.Quartz.EntityFrameworkCore.Migrations.QuartzSimpleTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<long>("RepeatCount")
+                        .HasColumnType("bigint")
+                        .HasColumnName("repeat_count");
+
+                    b.Property<long>("RepeatInterval")
+                        .HasColumnType("bigint")
+                        .HasColumnName("repeat_interval");
+
+                    b.Property<long>("TimesTriggered")
+                        .HasColumnType("bigint")
+                        .HasColumnName("times_triggered");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup");
+
+                    b.ToTable("qrtz_simple_triggers", "quartz");
+                });
+
+            modelBuilder.Entity("AppAny.Quartz.EntityFrameworkCore.Migrations.QuartzTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<string>("CalendarName")
+                        .HasColumnType("text")
+                        .HasColumnName("calendar_name");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("text")
+                        .HasColumnName("description");
+
+                    b.Property<long?>("EndTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("end_time");
+
+                    b.Property<byte[]>("JobData")
+                        .HasColumnType("bytea")
+                        .HasColumnName("job_data");
+
+                    b.Property<string>("JobGroup")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("job_group");
+
+                    b.Property<string>("JobName")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("job_name");
+
+                    b.Property<short?>("MisfireInstruction")
+                        .HasColumnType("smallint")
+                        .HasColumnName("misfire_instr");
+
+                    b.Property<long?>("NextFireTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("next_fire_time");
+
+                    b.Property<long?>("PreviousFireTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("prev_fire_time");
+
+                    b.Property<int?>("Priority")
+                        .HasColumnType("integer")
+                        .HasColumnName("priority");
+
+                    b.Property<long>("StartTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("start_time");
+
+                    b.Property<string>("TriggerState")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_state");
+
+                    b.Property<string>("TriggerType")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_type");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup");
+
+                    b.HasIndex("NextFireTime")
+                        .HasDatabaseName("idx_qrtz_t_next_fire_time");
+
+                    b.HasIndex("TriggerState")
+                        .HasDatabaseName("idx_qrtz_t_state");
+
+                    b.HasIndex("NextFireTime", "TriggerState")
+                        .HasDatabaseName("idx_qrtz_t_nft_st");
+
+                    b.HasIndex("SchedulerName", "JobName", "JobGroup");
+
+                    b.ToTable("qrtz_triggers", "quartz");
+                });
+
+            modelBuilder.Entity("LexCore.Entities.DraftProject", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("uuid");
+
+                    b.Property<string>("Code")
+                        .IsRequired()
+                        .HasColumnType("text");
+
+                    b.Property<DateTimeOffset>("CreatedDate")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("timestamp with time zone")
+                        .HasDefaultValueSql("now()");
+
+                    b.Property<string>("Description")
+                        .IsRequired()
+                        .HasColumnType("text");
+
+                    b.Property<bool?>("IsConfidential")
+                        .HasColumnType("boolean");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("text");
+
+                    b.Property<Guid?>("ProjectManagerId")
+                        .HasColumnType("uuid");
+
+                    b.Property<int>("RetentionPolicy")
+                        .HasColumnType("integer");
+
+                    b.Property<int>("Type")
+                        .HasColumnType("integer");
+
+                    b.Property<DateTimeOffset>("UpdatedDate")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("timestamp with time zone")
+                        .HasDefaultValueSql("now()");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Code")
+                        .IsUnique();
+
+                    b.HasIndex("ProjectManagerId");
+
+                    b.ToTable("DraftProjects");
+                });
+
+            modelBuilder.Entity("LexCore.Entities.FlexProjectMetadata", b =>
+                {
+                    b.Property<Guid>("ProjectId")
+                        .HasColumnType("uuid");
+
+                    b.Property<int?>("LexEntryCount")
+                        .HasColumnType("integer");
+
+                    b.HasKey("ProjectId");
+
+                    b.ToTable("FlexProjectMetadata");
+                });
+
+            modelBuilder.Entity("LexCore.Entities.Project", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("uuid");
+
+                    b.Property<string>("Code")
+                        .IsRequired()
+                        .HasColumnType("text");
+
+                    b.Property<DateTimeOffset>("CreatedDate")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("timestamp with time zone")
+                        .HasDefaultValueSql("now()");
+
+                    b.Property<DateTimeOffset?>("DeletedDate")
+                        .HasColumnType("timestamp with time zone");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("text");
+
+                    b.Property<bool?>("IsConfidential")
+                        .HasColumnType("boolean");
+
+                    b.Property<DateTimeOffset?>("LastCommit")
+                        .HasColumnType("timestamp with time zone");
+
+                    b.Property<DateTimeOffset?>("MigratedDate")
+                        .HasColumnType("timestamp with time zone");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("text");
+
+                    b.Property<Guid?>("ParentId")
+                        .HasColumnType("uuid");
+
+                    b.Property<int>("ProjectOrigin")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasDefaultValue(1);
+
+                    b.Property<int>("ResetStatus")
+                        .HasColumnType("integer");
+
+                    b.Property<int>("RetentionPolicy")
+                        .HasColumnType("integer");
+
+                    b.Property<int>("Type")
+                        .HasColumnType("integer");
+
+                    b.Property<DateTimeOffset>("UpdatedDate")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("timestamp with time zone")
+                        .HasDefaultValueSql("now()");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Code")
+                        .IsUnique();
+
+                    b.HasIndex("ParentId");
+
+                    b.ToTable("Projects");
+                });
+
+            modelBuilder.Entity("LexCore.Entities.ProjectUsers", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("uuid");
+
+                    b.Property<DateTimeOffset>("CreatedDate")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("timestamp with time zone")
+                        .HasDefaultValueSql("now()");
+
+                    b.Property<Guid>("ProjectId")
+                        .HasColumnType("uuid");
+
+                    b.Property<int>("Role")
+                        .HasColumnType("integer");
+
+                    b.Property<DateTimeOffset>("UpdatedDate")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("timestamp with time zone")
+                        .HasDefaultValueSql("now()");
+
+                    b.Property<Guid>("UserId")
+                        .HasColumnType("uuid");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ProjectId");
+
+                    b.HasIndex("UserId", "ProjectId")
+                        .IsUnique();
+
+                    b.ToTable("ProjectUsers");
+                });
+
+            modelBuilder.Entity("LexCore.Entities.User", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("uuid");
+
+                    b.Property<bool>("CanCreateProjects")
+                        .HasColumnType("boolean");
+
+                    b.Property<Guid?>("CreatedById")
+                        .HasColumnType("uuid");
+
+                    b.Property<DateTimeOffset>("CreatedDate")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("timestamp with time zone")
+                        .HasDefaultValueSql("now()");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("text")
+                        .UseCollation("case_insensitive");
+
+                    b.Property<bool>("EmailVerified")
+                        .HasColumnType("boolean");
+
+                    b.Property<string>("GoogleId")
+                        .HasColumnType("text");
+
+                    b.Property<bool>("IsAdmin")
+                        .HasColumnType("boolean");
+
+                    b.Property<DateTimeOffset>("LastActive")
+                        .HasColumnType("timestamp with time zone");
+
+                    b.Property<string>("LocalizationCode")
+                        .IsRequired()
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("text")
+                        .HasDefaultValue("en");
+
+                    b.Property<bool>("Locked")
+                        .HasColumnType("boolean");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("text");
+
+                    b.Property<string>("PasswordHash")
+                        .IsRequired()
+                        .HasColumnType("text");
+
+                    b.Property<int?>("PasswordStrength")
+                        .HasColumnType("integer");
+
+                    b.Property<string>("Salt")
+                        .IsRequired()
+                        .HasColumnType("text");
+
+                    b.Property<DateTimeOffset>("UpdatedDate")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("timestamp with time zone")
+                        .HasDefaultValueSql("now()");
+
+                    b.Property<string>("Username")
+                        .HasColumnType("text")
+                        .UseCollation("case_insensitive");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CreatedById");
+
+                    b.HasIndex("Email")
+                        .IsUnique();
+
+                    b.HasIndex("Username")
+                        .IsUnique();
+
+                    b.ToTable("Users");
+                });
+
+            modelBuilder.Entity("AppAny.Quartz.EntityFrameworkCore.Migrations.QuartzBlobTrigger", b =>
+                {
+                    b.HasOne("AppAny.Quartz.EntityFrameworkCore.Migrations.QuartzTrigger", "Trigger")
+                        .WithMany("BlobTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("AppAny.Quartz.EntityFrameworkCore.Migrations.QuartzCronTrigger", b =>
+                {
+                    b.HasOne("AppAny.Quartz.EntityFrameworkCore.Migrations.QuartzTrigger", "Trigger")
+                        .WithMany("CronTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("AppAny.Quartz.EntityFrameworkCore.Migrations.QuartzSimplePropertyTrigger", b =>
+                {
+                    b.HasOne("AppAny.Quartz.EntityFrameworkCore.Migrations.QuartzTrigger", "Trigger")
+                        .WithMany("SimplePropertyTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("AppAny.Quartz.EntityFrameworkCore.Migrations.QuartzSimpleTrigger", b =>
+                {
+                    b.HasOne("AppAny.Quartz.EntityFrameworkCore.Migrations.QuartzTrigger", "Trigger")
+                        .WithMany("SimpleTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("AppAny.Quartz.EntityFrameworkCore.Migrations.QuartzTrigger", b =>
+                {
+                    b.HasOne("AppAny.Quartz.EntityFrameworkCore.Migrations.QuartzJobDetail", "JobDetail")
+                        .WithMany("Triggers")
+                        .HasForeignKey("SchedulerName", "JobName", "JobGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("JobDetail");
+                });
+
+            modelBuilder.Entity("LexCore.Entities.DraftProject", b =>
+                {
+                    b.HasOne("LexCore.Entities.User", "ProjectManager")
+                        .WithMany()
+                        .HasForeignKey("ProjectManagerId")
+                        .OnDelete(DeleteBehavior.Cascade);
+
+                    b.Navigation("ProjectManager");
+                });
+
+            modelBuilder.Entity("LexCore.Entities.FlexProjectMetadata", b =>
+                {
+                    b.HasOne("LexCore.Entities.Project", null)
+                        .WithOne("FlexProjectMetadata")
+                        .HasForeignKey("LexCore.Entities.FlexProjectMetadata", "ProjectId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("LexCore.Entities.Project", b =>
+                {
+                    b.HasOne("LexCore.Entities.Project", null)
+                        .WithMany()
+                        .HasForeignKey("ParentId");
+                });
+
+            modelBuilder.Entity("LexCore.Entities.ProjectUsers", b =>
+                {
+                    b.HasOne("LexCore.Entities.Project", "Project")
+                        .WithMany("Users")
+                        .HasForeignKey("ProjectId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.HasOne("LexCore.Entities.User", "User")
+                        .WithMany("Projects")
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Project");
+
+                    b.Navigation("User");
+                });
+
+            modelBuilder.Entity("LexCore.Entities.User", b =>
+                {
+                    b.HasOne("LexCore.Entities.User", "CreatedBy")
+                        .WithMany("UsersICreated")
+                        .HasForeignKey("CreatedById")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("CreatedBy");
+                });
+
+            modelBuilder.Entity("AppAny.Quartz.EntityFrameworkCore.Migrations.QuartzJobDetail", b =>
+                {
+                    b.Navigation("Triggers");
+                });
+
+            modelBuilder.Entity("AppAny.Quartz.EntityFrameworkCore.Migrations.QuartzTrigger", b =>
+                {
+                    b.Navigation("BlobTriggers");
+
+                    b.Navigation("CronTriggers");
+
+                    b.Navigation("SimplePropertyTriggers");
+
+                    b.Navigation("SimpleTriggers");
+                });
+
+            modelBuilder.Entity("LexCore.Entities.Project", b =>
+                {
+                    b.Navigation("FlexProjectMetadata");
+
+                    b.Navigation("Users");
+                });
+
+            modelBuilder.Entity("LexCore.Entities.User", b =>
+                {
+                    b.Navigation("Projects");
+
+                    b.Navigation("UsersICreated");
+                });
+#pragma warning restore 612, 618
+        }
+    }
+}
diff --git a/backend/LexData/Migrations/20240425121912_AddIsConfidentialColumnToProjectAndDraftProject.cs b/backend/LexData/Migrations/20240425121912_AddIsConfidentialColumnToProjectAndDraftProject.cs
new file mode 100644
index 000000000..556070edb
--- /dev/null
+++ b/backend/LexData/Migrations/20240425121912_AddIsConfidentialColumnToProjectAndDraftProject.cs
@@ -0,0 +1,38 @@
+using Microsoft.EntityFrameworkCore.Migrations;
+
+#nullable disable
+
+namespace LexData.Migrations
+{
+    /// <inheritdoc />
+    public partial class AddIsConfidentialColumnToProjectAndDraftProject : Migration
+    {
+        /// <inheritdoc />
+        protected override void Up(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.AddColumn<bool>(
+                name: "IsConfidential",
+                table: "Projects",
+                type: "boolean",
+                nullable: true);
+
+            migrationBuilder.AddColumn<bool>(
+                name: "IsConfidential",
+                table: "DraftProjects",
+                type: "boolean",
+                nullable: true);
+        }
+
+        /// <inheritdoc />
+        protected override void Down(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.DropColumn(
+                name: "IsConfidential",
+                table: "Projects");
+
+            migrationBuilder.DropColumn(
+                name: "IsConfidential",
+                table: "DraftProjects");
+        }
+    }
+}
diff --git a/backend/LexData/Migrations/LexBoxDbContextModelSnapshot.cs b/backend/LexData/Migrations/LexBoxDbContextModelSnapshot.cs
index e3db94ea7..f05e25c5f 100644
--- a/backend/LexData/Migrations/LexBoxDbContextModelSnapshot.cs
+++ b/backend/LexData/Migrations/LexBoxDbContextModelSnapshot.cs
@@ -485,6 +485,9 @@ protected override void BuildModel(ModelBuilder modelBuilder)
                         .IsRequired()
                         .HasColumnType("text");
 
+                    b.Property<bool?>("IsConfidential")
+                        .HasColumnType("boolean");
+
                     b.Property<string>("Name")
                         .IsRequired()
                         .HasColumnType("text");
@@ -610,6 +613,9 @@ protected override void BuildModel(ModelBuilder modelBuilder)
                     b.Property<string>("Description")
                         .HasColumnType("text");
 
+                    b.Property<bool?>("IsConfidential")
+                        .HasColumnType("boolean");
+
                     b.Property<DateTimeOffset?>("LastCommit")
                         .HasColumnType("timestamp with time zone");
 
diff --git a/backend/LexData/SeedingData.cs b/backend/LexData/SeedingData.cs
index 63dfea5d6..52dd16ee7 100644
--- a/backend/LexData/SeedingData.cs
+++ b/backend/LexData/SeedingData.cs
@@ -84,6 +84,7 @@ public async Task SeedDatabase(CancellationToken cancellationToken = default)
             ProjectOrigin = ProjectMigrationStatus.Migrated,
             LastCommit = DateTimeOffset.UtcNow,
             RetentionPolicy = RetentionPolicy.Dev,
+            IsConfidential = null,
             Users = new()
             {
                 new()
@@ -132,7 +133,8 @@ public async Task SeedDatabase(CancellationToken cancellationToken = default)
             ProjectOrigin = ProjectMigrationStatus.Migrated,
             LastCommit = DateTimeOffset.UtcNow,
             RetentionPolicy = RetentionPolicy.Dev,
-            Users = []
+            IsConfidential = false,
+            Users = [],
         });
 
         lexBoxDbContext.Attach(new Organization
diff --git a/backend/Testing/LexCore/Services/ProjectServiceTest.cs b/backend/Testing/LexCore/Services/ProjectServiceTest.cs
index 66aae2af9..2151e8db8 100644
--- a/backend/Testing/LexCore/Services/ProjectServiceTest.cs
+++ b/backend/Testing/LexCore/Services/ProjectServiceTest.cs
@@ -32,7 +32,7 @@ public ProjectServiceTest(TestingServicesFixture testing)
     public async Task CanCreateProject()
     {
         var projectId = await _projectService.CreateProject(
-            new(null, "TestProject", "Test", "test", ProjectType.FLEx, RetentionPolicy.Test, null));
+            new(null, "TestProject", "Test", "test", ProjectType.FLEx, RetentionPolicy.Test, false, null));
         projectId.ShouldNotBe(default);
     }
 
@@ -41,10 +41,10 @@ public async Task ShouldErrorIfCreatingAProjectWithTheSameCode()
     {
         //first project should be created
         await _projectService.CreateProject(
-            new(null, "TestProject", "Test", "test-dup-code", ProjectType.FLEx, RetentionPolicy.Test, null));
+            new(null, "TestProject", "Test", "test-dup-code", ProjectType.FLEx, RetentionPolicy.Test, false, null));
 
         var exception = await _projectService.CreateProject(
-            new(null, "Test2", "Test desc", "test-dup-code", ProjectType.Unknown, RetentionPolicy.Dev, null)
+            new(null, "Test2", "Test desc", "test-dup-code", ProjectType.Unknown, RetentionPolicy.Dev, false, null)
         ).ShouldThrowAsync<DbUpdateException>();
 
         exception.InnerException.ShouldBeOfType<PostgresException>()
diff --git a/frontend/schema.graphql b/frontend/schema.graphql
index b333b7504..93b8a9056 100644
--- a/frontend/schema.graphql
+++ b/frontend/schema.graphql
@@ -110,6 +110,7 @@ type DraftProject {
   retentionPolicy: RetentionPolicy!
   projectManager: User
   projectManagerId: UUID
+  isConfidential: Boolean
   id: UUID!
   createdDate: DateTime!
   updatedDate: DateTime!
@@ -172,6 +173,7 @@ type Mutation {
   changeProjectMemberRole(input: ChangeProjectMemberRoleInput!): ChangeProjectMemberRolePayload!
   changeProjectName(input: ChangeProjectNameInput!): ChangeProjectNamePayload!
   changeProjectDescription(input: ChangeProjectDescriptionInput!): ChangeProjectDescriptionPayload!
+  setProjectConfidentiality(input: SetProjectConfidentialityInput!): SetProjectConfidentialityPayload!
   leaveProject(input: LeaveProjectInput!): LeaveProjectPayload!
   removeProjectMember(input: RemoveProjectMemberInput!): RemoveProjectMemberPayload!
   softDeleteProject(input: SoftDeleteProjectInput!): SoftDeleteProjectPayload!
@@ -217,6 +219,7 @@ type Project {
   description: String
   retentionPolicy: RetentionPolicy!
   type: ProjectType!
+  isConfidential: Boolean
   flexProjectMetadata: FlexProjectMetadata
   lastCommit: DateTime
   deletedDate: DateTime
@@ -284,6 +287,11 @@ type SetOrgMemberRolePayload {
   errors: [SetOrgMemberRoleError!]
 }
 
+type SetProjectConfidentialityPayload {
+  project: Project
+  errors: [SetProjectConfidentialityError!]
+}
+
 type SetUserLockedPayload {
   user: User
   errors: [SetUserLockedError!]
@@ -358,6 +366,8 @@ union LeaveProjectError = NotFoundError | LastMemberCantLeaveError
 
 union SetOrgMemberRoleError = DbError | NotFoundError
 
+union SetProjectConfidentialityError = NotFoundError | DbError
+
 union SetUserLockedError = NotFoundError
 
 union SoftDeleteProjectError = NotFoundError | DbError
@@ -421,6 +431,7 @@ input CreateProjectInput {
   code: String!
   type: ProjectType!
   retentionPolicy: RetentionPolicy!
+  isConfidential: Boolean!
   projectManagerId: UUID
 }
 
@@ -453,6 +464,7 @@ input DraftProjectFilterInput {
   retentionPolicy: RetentionPolicyOperationFilterInput
   projectManager: UserFilterInput
   projectManagerId: UuidOperationFilterInput
+  isConfidential: BooleanOperationFilterInput
   id: UuidOperationFilterInput
   createdDate: DateTimeOperationFilterInput
   updatedDate: DateTimeOperationFilterInput
@@ -466,6 +478,7 @@ input DraftProjectSortInput {
   retentionPolicy: SortEnumType
   projectManager: UserSortInput
   projectManagerId: SortEnumType
+  isConfidential: SortEnumType
   id: SortEnumType
   createdDate: SortEnumType
   updatedDate: SortEnumType
@@ -569,6 +582,7 @@ input ProjectFilterInput {
   description: StringOperationFilterInput
   retentionPolicy: RetentionPolicyOperationFilterInput
   type: ProjectTypeOperationFilterInput
+  isConfidential: BooleanOperationFilterInput
   flexProjectMetadata: FlexProjectMetadataFilterInput
   users: ListFilterInputTypeOfProjectUsersFilterInput
   lastCommit: DateTimeOperationFilterInput
@@ -603,6 +617,7 @@ input ProjectSortInput {
   description: SortEnumType
   retentionPolicy: SortEnumType
   type: SortEnumType
+  isConfidential: SortEnumType
   flexProjectMetadata: FlexProjectMetadataSortInput
   lastCommit: SortEnumType
   deletedDate: SortEnumType
@@ -660,6 +675,11 @@ input SetOrgMemberRoleInput {
   emailOrUsername: String!
 }
 
+input SetProjectConfidentialityInput {
+  projectId: UUID!
+  isConfidential: Boolean!
+}
+
 input SetUserLockedInput {
   userId: UUID!
   locked: Boolean!
diff --git a/frontend/src/lib/app.postcss b/frontend/src/lib/app.postcss
index e3ef586cf..bbef11b2a 100644
--- a/frontend/src/lib/app.postcss
+++ b/frontend/src/lib/app.postcss
@@ -151,8 +151,8 @@ input[readonly]:focus {
   border-radius: var(--rounded-badge);
 }
 
-.prose .alert a {
-  filter: contrast(1.5)
+.alert a {
+  color: #0024b9;
 }
 
 .collapse input:hover ~ .collapse-title {
diff --git a/frontend/src/lib/components/Badges/Badge.svelte b/frontend/src/lib/components/Badges/Badge.svelte
index f6bb4ec6c..f1543bd7d 100644
--- a/frontend/src/lib/components/Badges/Badge.svelte
+++ b/frontend/src/lib/components/Badges/Badge.svelte
@@ -8,13 +8,19 @@
 
   export let variant: BadgeVariant = 'badge-neutral';
   export let icon: IconString | undefined = undefined;
+  export let hoverIcon: IconString | undefined = undefined;
   export let outline = false;
 </script>
 
 <span
-  class="badge {variant ?? ''} whitespace-nowrap inline-flex gap-2 items-center"
+  class="badge {variant ?? ''} whitespace-nowrap inline-flex gap-2 items-center group"
   class:badge-outline={outline}
 >
   <slot />
-  <Icon {icon} />
+  <span class="contents" class:group-hover:hidden={!!hoverIcon}>
+    <Icon {icon} />
+  </span>
+  <span class="hidden" class:group-hover:contents={!!hoverIcon}>
+    <Icon icon={hoverIcon} />
+  </span>
 </span>
diff --git a/frontend/src/lib/components/Badges/BadgeButton.svelte b/frontend/src/lib/components/Badges/BadgeButton.svelte
index 0189c11b3..a8bf27c42 100644
--- a/frontend/src/lib/components/Badges/BadgeButton.svelte
+++ b/frontend/src/lib/components/Badges/BadgeButton.svelte
@@ -6,13 +6,12 @@
   type BadgeButtonVariant = 'badge-success' | 'badge-warning' | 'badge-neutral' | undefined;
   export let variant: BadgeButtonVariant = undefined;
   export let icon: IconString | undefined = undefined;
+  export let hoverIcon: IconString | undefined = undefined;
   export let disabled = false;
-
-  $: _type = type as unknown as BadgeVariant;
 </script>
 
-<button on:click {disabled} class="badge btn btn-sm !p-0">
-  <Badge {variant} {icon}>
+<button on:click {disabled} class="badge btn btn-sm !p-0 bright transition-all border-0" class:hover:brightness-90={!disabled}>
+  <Badge {variant} {icon} hoverIcon={disabled ? undefined : hoverIcon}>
     <slot />
   </Badge>
 </button>
diff --git a/frontend/src/lib/components/EditableText.svelte b/frontend/src/lib/components/EditableText.svelte
index ba45ec60f..9567e551a 100644
--- a/frontend/src/lib/components/EditableText.svelte
+++ b/frontend/src/lib/components/EditableText.svelte
@@ -125,7 +125,7 @@
   {:else}
     <button
       class:hover:bg-base-300={!disabled}
-      class="content-wrapper inline-flex items-center cursor-text rounded-lg py-2 px-3 -mx-3"
+      class="content-wrapper inline-flex items-center cursor-text rounded-lg py-1 px-1.5 -mx-1.5"
       on:click={startEditing}
       on:keypress={startEditing}
     >
diff --git a/frontend/src/lib/components/MoreSettings.svelte b/frontend/src/lib/components/MoreSettings.svelte
index ec1b93bec..77109028c 100644
--- a/frontend/src/lib/components/MoreSettings.svelte
+++ b/frontend/src/lib/components/MoreSettings.svelte
@@ -1,5 +1,7 @@
 <script>
   import t from '$lib/i18n';
+
+  export let column = false;
 </script>
 
 <div class="collapse border-2 border-base-200 collapse-arrow mt-4">
@@ -7,7 +9,7 @@
   <div class="collapse-title text-lg">{$t('more_settings.title')}</div>
   <div class="collapse-content">
     <div class="divider mt-0" />
-    <div class="flex justify-end gap-4 max-sm:flex-col">
+    <div class="flex justify-end gap-4 max-sm:flex-col" class:flex-col={column} class:sm:items-end={column}>
       <slot />
     </div>
   </div>
diff --git a/frontend/src/lib/components/Projects/ProjectConfidentialityCombobox.svelte b/frontend/src/lib/components/Projects/ProjectConfidentialityCombobox.svelte
new file mode 100644
index 000000000..8e44e0784
--- /dev/null
+++ b/frontend/src/lib/components/Projects/ProjectConfidentialityCombobox.svelte
@@ -0,0 +1,25 @@
+<script lang="ts">
+  import t from '$lib/i18n';
+  import Checkbox from '../../forms/Checkbox.svelte';
+  import { slide } from 'svelte/transition';
+  import { Icon } from '$lib/icons';
+  import Markdown from 'svelte-exmarkdown';
+  import { NewTabLinkRenderer } from '$lib/components/Markdown';
+
+  export let value: boolean;
+</script>
+
+<Checkbox
+  label={$t('project.confidential.label')}
+  description={$t('project.confidential.description')}
+  variant="checkbox-warning"
+  labelColor="text-warning"
+  bind:value
+/>
+
+{#if value}
+  <div class="alert alert-warning mt-4" transition:slide>
+    <Icon icon="i-mdi-alert-outline" />
+    <Markdown md={$t('project.confidential.suggestions')} plugins={[{ renderer: { a: NewTabLinkRenderer } }]} />
+  </div>
+{/if}
diff --git a/frontend/src/lib/components/Projects/ProjectConfidentialityFilterSelect.svelte b/frontend/src/lib/components/Projects/ProjectConfidentialityFilterSelect.svelte
new file mode 100644
index 000000000..2c07f3dc5
--- /dev/null
+++ b/frontend/src/lib/components/Projects/ProjectConfidentialityFilterSelect.svelte
@@ -0,0 +1,22 @@
+<script lang="ts">
+  import { Select } from '$lib/forms';
+  import t, { type I18nKey } from '$lib/i18n';
+  import type { Confidentiality } from './ProjectFilter.svelte';
+
+  // eslint-disable-next-line @typescript-eslint/no-redundant-type-constituents -- false positive
+  export let value: Confidentiality | undefined;
+  const options: Record<Confidentiality, I18nKey> = {
+    true: 'project.confidential.confidential',
+    false: 'project.confidential.not_confidential',
+    unset: 'project.confidential.unspecified',
+  };
+</script>
+
+<div class="relative">
+  <Select label={$t('project.confidential.confidentiality')} bind:value on:change>
+    <option value={undefined}>{$t('common.any')}</option>
+    {#each Object.entries(options) as [value, label]}
+      <option value={value}>{$t(label)}</option>
+    {/each}
+  </Select>
+</div>
diff --git a/frontend/src/lib/components/Projects/ProjectFilter.svelte b/frontend/src/lib/components/Projects/ProjectFilter.svelte
index daa0def59..6096a59aa 100644
--- a/frontend/src/lib/components/Projects/ProjectFilter.svelte
+++ b/frontend/src/lib/components/Projects/ProjectFilter.svelte
@@ -7,9 +7,12 @@
     ProjectItem & { isDraft?: false } |
     DraftProject & { isDraft: true; createUrl: string };
 
+  export type Confidentiality = `${boolean}` | 'unset';
+
   export type ProjectFilters = {
     projectSearch: string;
     projectType: ProjectType | undefined;
+    confidential: Confidentiality | undefined;
     showDeletedProjects: boolean;
     hideDraftProjects: boolean;
     memberSearch: string | undefined;
@@ -26,7 +29,10 @@
           p.name.toLocaleLowerCase().includes(searchLower) ||
           p.code.toLocaleLowerCase().includes(searchLower)) &&
         (!projectFilters.projectType || p.type === projectFilters.projectType) &&
-        (!projectFilters.hideDraftProjects || !p.isDraft)
+        (!projectFilters.hideDraftProjects || !p.isDraft) &&
+        (projectFilters.confidential === undefined ||
+          (projectFilters.confidential === p.isConfidential?.toString()) ||
+          (projectFilters.confidential === 'unset' && (p.isConfidential ?? undefined) === undefined))
     );
   }
 </script>
@@ -40,13 +46,14 @@
   import { AuthenticatedUserIcon, Icon, TrashIcon } from '$lib/icons';
   import t from '$lib/i18n';
   import IconButton from '../IconButton.svelte';
+  import ProjectConfidentialityFilterSelect from './ProjectConfidentialityFilterSelect.svelte';
 
   type Filters = Partial<ProjectFilters> & Pick<ProjectFilters, 'projectSearch'>;
   export let filters: Writable<Filters>;
   export let filterDefaults: Filters;
   export let hasActiveFilter: boolean = false;
   export let autofocus: true | undefined = undefined;
-  export let filterKeys: (keyof Filters)[] = ['projectSearch', 'projectType', 'showDeletedProjects', 'memberSearch', 'hideDraftProjects'];
+  export let filterKeys: (keyof Filters)[] = ['projectSearch', 'projectType', 'confidential', 'showDeletedProjects', 'memberSearch', 'hideDraftProjects'];
   export let loading = false;
 
   function filterEnabled(filter: keyof Filters): boolean {
@@ -61,7 +68,20 @@
         <ActiveFilter {filter}>
           <ProjectTypeIcon type={filter.value} />
         </ActiveFilter>
-      {:else if filter.key === 'showDeletedProjects'}
+      {:else if filter.key === 'confidential' && filter.value}
+        <ActiveFilter {filter}>
+          {#if filter.value === 'true'}
+            <Icon icon="i-mdi-shield-lock-outline" color="text-warning" />
+            {$t('project.confidential.confidential')}
+          {:else if filter.value === 'false'}
+            <Icon icon="i-mdi-shield-lock-open-outline" />
+            {$t('project.confidential.not_confidential')}
+          {:else}
+            <Icon icon="i-mdi-shield-lock-outline" color="text-warning" />
+            {$t('project.confidential.unspecified')}
+          {/if}
+        </ActiveFilter>
+      {:else if filter.key === 'showDeletedProjects' && filter.value}
         <ActiveFilter {filter}>
           <TrashIcon color="text-error" />
           {$t('project.filter.show_deleted')}
@@ -71,7 +91,7 @@
           <AuthenticatedUserIcon />
           {filter.value}
         </ActiveFilter>
-      {:else if filter.key === 'hideDraftProjects'}
+      {:else if filter.key === 'hideDraftProjects' && filter.value}
         <ActiveFilter {filter}>
           <Icon icon="i-mdi-script" color="text-warning" />
           {$t('project.filter.hide_drafts')}
@@ -117,6 +137,11 @@
         <ProjectTypeSelect bind:value={$filters.projectType} undefinedOptionLabel={$t('common.any')} includeUnknown />
       </div>
     {/if}
+    {#if filterEnabled('confidential')}
+      <div class="form-control">
+        <ProjectConfidentialityFilterSelect bind:value={$filters.confidential} />
+      </div>
+    {/if}
     {#if filterEnabled('showDeletedProjects')}
       <div class="form-control">
         <label class="cursor-pointer label gap-4">
diff --git a/frontend/src/lib/components/Projects/ProjectTable.svelte b/frontend/src/lib/components/Projects/ProjectTable.svelte
index e67fbc101..4c5bf722a 100644
--- a/frontend/src/lib/components/Projects/ProjectTable.svelte
+++ b/frontend/src/lib/components/Projects/ProjectTable.svelte
@@ -53,8 +53,8 @@
         <tr>
           {#if isColumnVisible('name')}
             <td>
-              {#if project.isDraft}
-                <span class="flex gap-2 items-center">
+              <span class="flex gap-2 items-center">
+                {#if project.isDraft}
                   <a class="link" href={project.createUrl}>
                     {project.name}
                   </a>
@@ -63,17 +63,24 @@
                     data-tip={$t('admin_dashboard.is_draft')}>
                     <Icon icon="i-mdi-script" />
                   </span>
-                </span>
-              {:else if project.deletedDate}
-                <span class="flex gap-2 text-error items-center">
-                  {project.name}
-                  <TrashIcon pale />
-                </span>
-              {:else}
-                <a class="link" href={`/project/${project.code}`}>
-                  {project.name}
-                </a>
-              {/if}
+                {:else if project.deletedDate}
+                  <span class="contents text-error">
+                    {project.name}
+                    <TrashIcon pale />
+                  </span>
+                {:else}
+                  <a class="link" href={`/project/${project.code}`}>
+                    {project.name}
+                  </a>
+                {/if}
+                {#if project.isConfidential}
+                  <span
+                    class="tooltip text-warning text-xl shrink-0 leading-0"
+                    data-tip={$t('project.confidential.confidential')}>
+                    <Icon icon="i-mdi-shield-lock-outline" color="text-warning" />
+                  </span>
+                {/if}
+              </span>
             </td>
           {/if}
           {#if isColumnVisible('code')}
diff --git a/frontend/src/lib/components/Projects/index.ts b/frontend/src/lib/components/Projects/index.ts
index ef8701d9b..732b9ba00 100644
--- a/frontend/src/lib/components/Projects/index.ts
+++ b/frontend/src/lib/components/Projects/index.ts
@@ -1,3 +1,4 @@
 export { default as ProjectFilter } from './ProjectFilter.svelte';
 export { default as ProjectTable } from '../Projects/ProjectTable.svelte';
 export * from './ProjectFilter.svelte';
+export { default as ProjectConfidentialityCombobox } from './ProjectConfidentialityCombobox.svelte';
diff --git a/frontend/src/lib/email/CreateProjectRequest.svelte b/frontend/src/lib/email/CreateProjectRequest.svelte
index d97464d7f..1fcde0dc7 100644
--- a/frontend/src/lib/email/CreateProjectRequest.svelte
+++ b/frontend/src/lib/email/CreateProjectRequest.svelte
@@ -36,7 +36,10 @@
             <td>{$t('project.create.retention_policy')}</td>
             <td><FormatRetentionPolicy policy={project.retentionPolicy}/></td>
         </tr>
-
+        <tr>
+            <td>{$t('project.confidential.confidential')}</td>
+            <td>{$t('common.yes_no', {value: project.isConfidential.toString()})}</td>
+        </tr>
     </mj-table>
 <!--    todo should have a url here-->
     <mj-button href={createUrl}>{$t('project.create.submit')}</mj-button>
diff --git a/frontend/src/lib/forms/Checkbox.svelte b/frontend/src/lib/forms/Checkbox.svelte
index 95b231e3f..ba81955fa 100644
--- a/frontend/src/lib/forms/Checkbox.svelte
+++ b/frontend/src/lib/forms/Checkbox.svelte
@@ -1,17 +1,31 @@
 <script lang="ts">
+  import Markdown from 'svelte-exmarkdown';
   import FormFieldError from './FormFieldError.svelte';
   import { randomFormId } from './utils';
+  import { NewTabLinkRenderer } from '$lib/components/Markdown';
 
   export let label: string;
   export let value: boolean;
   export let id = randomFormId();
   export let error: string | string[] | undefined = undefined;
+  export let description: string | undefined = undefined;
+  export let variant: 'checkbox-warning' | undefined = undefined;
+  export let labelColor: 'text-warning' | undefined = undefined;
 </script>
 
 <div class="form-control w-full">
   <label class="label cursor-pointer justify-normal pb-0">
-    <input {id} type="checkbox" bind:checked={value} class="checkbox mr-4" />
-    <span class="label-text">{label}</span>
+    <input {id} type="checkbox" bind:checked={value} class="checkbox mr-4 {variant ?? ''}" />
+    <span class="label-text inline-flex items-center gap-2 {labelColor ?? ''}">
+      {label}
+    </span>
   </label>
+  {#if description}
+    <label for={id} class="label pb-0">
+      <span class="label-text-alt">
+        <Markdown md={description} plugins={[{ renderer: { a: NewTabLinkRenderer } }]} />
+      </span>
+    </label>
+  {/if}
   <FormFieldError {error} {id} />
 </div>
diff --git a/frontend/src/lib/i18n/locales/en.json b/frontend/src/lib/i18n/locales/en.json
index 14c1060a3..e20a55837 100644
--- a/frontend/src/lib/i18n/locales/en.json
+++ b/frontend/src/lib/i18n/locales/en.json
@@ -173,6 +173,24 @@ the [Linguistics Institute at Payap University](https://li.payap.ac.th/) in Chia
       "project_member": "Project member",
       "filter_user_projects": "Filter projects",
     },
+    "confidential": {
+      "confidential": "Confidential",
+      "confidentiality": "Confidentiality",
+      "not_confidential": "Not confidential",
+      "set_confidentiality": "Set project confidentiality",
+      "unspecified": "Unspecified",
+      "confidentiality_unspecified": "Confidentiality unspecified",
+      "label": "This project is confidential. The safety of project members is a security concern.",
+      "description": "Only project members and administrators will be able to see this project.",
+      "suggestions": "Consider using an alias for the project, project members and any other identifying information in the project. (For similar reasons to those mentioned for [confidential Paratext projects](https://paratext.org/paratext-help-and-support/registry-training-and-help/confidential-projects/).)",
+      "modal": {
+        "title": "Project confidentiality",
+        "submit_button_confidential": "Project is confidential",
+        "submit_button_not_confidential": "Project is not confidential",
+        "project_now_confidential": "Project is now confidential.",
+        "project_now_not_confidential": "Project is now not confidential.",
+      }
+    },
   },
   "project_page": {
     "project": "Project",
@@ -499,5 +517,7 @@ If you don't see a dialog or already closed it, click the button below:",
     "none": "None",
     "or": "Or",
     "any": "Any",
+    "yes_no": "{value, select, true {Yes} false {No} other {Unknown}}",
+    "any": "Any",
   }
 }
diff --git a/frontend/src/lib/type.utils.ts b/frontend/src/lib/type.utils.ts
index 5a4aa78e1..13aaf5436 100644
--- a/frontend/src/lib/type.utils.ts
+++ b/frontend/src/lib/type.utils.ts
@@ -42,3 +42,8 @@ export type NonEmptyArray<T> = [T, ...T[]];
 export function isNotEmpty<T>(value: T[]): value is NonEmptyArray<T> {
   return value.length > 0;
 }
+
+export type StringifyValues<T> = {
+  [K in keyof T]:
+    T[K] extends string ? T[K]
+  : T[K] extends boolean ? 'true' | 'false' : string };
diff --git a/frontend/src/lib/util/query-params.ts b/frontend/src/lib/util/query-params.ts
index b22c7f017..6c8324c7f 100644
--- a/frontend/src/lib/util/query-params.ts
+++ b/frontend/src/lib/util/query-params.ts
@@ -1,9 +1,9 @@
+import type { StandardEnum, StringifyValues } from '$lib/type.utils';
 import { queryParameters, ssp } from 'sveltekit-search-params';
 
 import type { ConditionalPick } from 'type-fest';
 import type { EncodeAndDecodeOptions } from 'sveltekit-search-params/sveltekit-search-params';
 import type { PrimitiveRecord } from './types';
-import type { StandardEnum } from '$lib/type.utils';
 import type { Writable } from 'svelte/store';
 
 // Require default values
@@ -47,8 +47,8 @@ export function getSearchParams<T extends Record<string, unknown>>(options: Quer
   }
 }
 
-export function getSearchParamValues<T extends Record<string, unknown>>(): T {
-  return Object.fromEntries(new URLSearchParams(location.search).entries()) as T;
+export function getSearchParamValues<T extends Record<string, unknown>>(): StringifyValues<T> {
+  return Object.fromEntries(new URLSearchParams(location.search).entries()) as StringifyValues<T>;
 }
 
 function getDefaults<T extends Record<string, unknown>>(
diff --git a/frontend/src/routes/(authenticated)/+page.svelte b/frontend/src/routes/(authenticated)/+page.svelte
index 17559c2fb..376478b4f 100644
--- a/frontend/src/routes/(authenticated)/+page.svelte
+++ b/frontend/src/routes/(authenticated)/+page.svelte
@@ -58,7 +58,7 @@
           {filters}
           filterDefaults={defaultFilterValues}
           on:change={() => (limitResults = true)}
-          filterKeys={['projectSearch', 'projectType']}
+          filterKeys={['projectSearch', 'projectType', 'confidential']}
         />
       </div>
       <div class="join">
diff --git a/frontend/src/routes/(authenticated)/+page.ts b/frontend/src/routes/(authenticated)/+page.ts
index c3d7a277a..226cd09ac 100644
--- a/frontend/src/routes/(authenticated)/+page.ts
+++ b/frontend/src/routes/(authenticated)/+page.ts
@@ -17,6 +17,7 @@ export async function load(event: PageLoadEvent) {
                 lastCommit
                 userCount
                 type
+                isConfidential
             }
         }
   `), {});
diff --git a/frontend/src/routes/(authenticated)/admin/+page.svelte b/frontend/src/routes/(authenticated)/admin/+page.svelte
index cacfa23fc..cb09e6035 100644
--- a/frontend/src/routes/(authenticated)/admin/+page.svelte
+++ b/frontend/src/routes/(authenticated)/admin/+page.svelte
@@ -21,6 +21,7 @@
   import { Button } from '$lib/forms';
   import { PageBreadcrumb } from '$lib/layout';
   import AdminTabs, { type AdminTabId } from './AdminTabs.svelte';
+  import type { Confidentiality } from '$lib/components/Projects';
 
   export let data: PageData;
   $: projects = data.projects;
@@ -33,6 +34,8 @@
     userSearch: queryParam.string<string>(''),
     showDeletedProjects: queryParam.boolean<boolean>(false),
     hideDraftProjects: queryParam.boolean<boolean>(false),
+    // eslint-disable-next-line @typescript-eslint/no-redundant-type-constituents -- false positive?
+    confidential: queryParam.string<Confidentiality | undefined>(undefined),
     projectType: queryParam.string<ProjectType | undefined>(undefined),
     memberSearch: queryParam.string(undefined),
     projectSearch: queryParam.string<string>(''),
diff --git a/frontend/src/routes/(authenticated)/admin/+page.ts b/frontend/src/routes/(authenticated)/admin/+page.ts
index aaeecb2df..e68f8c052 100644
--- a/frontend/src/routes/(authenticated)/admin/+page.ts
+++ b/frontend/src/routes/(authenticated)/admin/+page.ts
@@ -48,6 +48,8 @@ export async function load(event: PageLoadEvent) {
     ...(memberSearch ? { projectManager: { or: [ { email: { eq: memberSearch } }, { username: { eq: memberSearch } } ] } } : {})
   };
 
+
+
   //language=GraphQL
   const projectResultsPromise = client.awaitedQueryStore(event.fetch, graphql(`
         query loadAdminDashboardProjects($withDeletedProjects: Boolean!, $projectFilter: ProjectFilterInput, $draftFilter: DraftProjectFilterInput) {
@@ -62,6 +64,7 @@ export async function load(event: PageLoadEvent) {
               name
               lastCommit
               type
+              isConfidential
               deletedDate
               createdDate
               userCount
@@ -76,6 +79,7 @@ export async function load(event: PageLoadEvent) {
               createdDate
               description
               retentionPolicy
+              isConfidential
               projectManagerId
             }
         }
diff --git a/frontend/src/routes/(authenticated)/admin/AdminProjects.svelte b/frontend/src/routes/(authenticated)/admin/AdminProjects.svelte
index 3032c9ec4..8bf3718be 100644
--- a/frontend/src/routes/(authenticated)/admin/AdminProjects.svelte
+++ b/frontend/src/routes/(authenticated)/admin/AdminProjects.svelte
@@ -50,7 +50,10 @@
   let lastLoadUsedActiveFilter = false;
   $: if (!$loading) lastLoadUsedActiveFilter = hasActiveFilter;
   $: allProjects = [
-    ...draftProjects.map(p => ({ ...p, isDraft: true as const, createUrl: `/project/create?${toSearchParams<CreateProjectInput>(p)}` })),
+    ...draftProjects.map(p => ({
+      ...p, isDraft: true as const,
+      createUrl: `/project/create?${toSearchParams<CreateProjectInput>(p as CreateProjectInput)}` /* TODO #737 - Remove unnecessary cast */
+    })),
     ...projects.map(p => ({ ...p, isDraft: false as const })),
   ];
   $: filteredProjects = filterProjects(allProjects, $filters);
diff --git a/frontend/src/routes/(authenticated)/project/[project_code]/+page.svelte b/frontend/src/routes/(authenticated)/project/[project_code]/+page.svelte
index a8cb1213f..d470585ce 100644
--- a/frontend/src/routes/(authenticated)/project/[project_code]/+page.svelte
+++ b/frontend/src/routes/(authenticated)/project/[project_code]/+page.svelte
@@ -40,6 +40,8 @@
   import UserModal from '$lib/components/Users/UserModal.svelte';
   import IconButton from '$lib/components/IconButton.svelte';
   import ConfirmModal from '$lib/components/modals/ConfirmModal.svelte';
+  import ProjectConfidentialityBadge from './ProjectConfidentialityBadge.svelte';
+  import ProjectConfidentialityModal from './ProjectConfidentialityModal.svelte';
 
   export let data: PageData;
   $: user = data.user;
@@ -197,8 +199,8 @@
     }
   }
 
+  let projectConfidentialityModal: ProjectConfidentialityModal;
   let openInFlexModal: OpenInFlexModal;
-
   let leaveModal: ConfirmModal;
 
   async function leaveProject(): Promise<void> {
@@ -307,6 +309,7 @@
     </svelte:fragment>
     <svelte:fragment slot="header-content">
       <BadgeList>
+        <ProjectConfidentialityBadge on:click={projectConfidentialityModal.openModal} {canManage} isConfidential={project.isConfidential ?? undefined} />
         <ProjectTypeBadge type={project.type} />
         <Badge>
           <FormatRetentionPolicy policy={project.retentionPolicy} />
@@ -325,6 +328,7 @@
           </button>
         {/if}
       </BadgeList>
+      <ProjectConfidentialityModal bind:this={projectConfidentialityModal} projectId={project.id} isConfidential={project.isConfidential ?? undefined} />
     </svelte:fragment>
     <div class="space-y-4">
       <p class="text-2xl mb-4">{$t('project_page.summary')}</p>
@@ -345,33 +349,35 @@
           <span class="text-secondary">{$date(project.lastCommit)}</span>
         </div>
         {#if project.type === ProjectType.FlEx || project.type === ProjectType.WeSay}
-        <div class="text-lg inline-flex items-center gap-1">
-          {$t('project_page.num_entries')}:
+          <div class="text-lg flex items-center gap-1">
+            {$t('project_page.num_entries')}:
+            <span class="text-secondary">
+              {$number(lexEntryCount)}
+            </span>
+            <AdminContent>
+              <IconButton
+                loading={loadingEntryCount}
+                icon="i-mdi-refresh"
+                size="btn-sm"
+                variant="btn-ghost"
+                outline={false}
+                on:click={updateEntryCount}
+              />
+            </AdminContent>
+          </div>
+        {/if}
+        <div>
+          <div class="text-lg">{$t('project_page.description')}:</div>
           <span class="text-secondary">
-            {$number(lexEntryCount)}
-          </span>
-          <AdminContent>
-            <IconButton
-              loading={loadingEntryCount}
-              icon="i-mdi-refresh"
-              size="btn-sm"
-              variant="btn-ghost"
-              outline={false}
-              on:click={updateEntryCount}
+            <EditableText
+              value={project.description}
+              disabled={!canManage}
+              saveHandler={updateProjectDescription}
+              placeholder={$t('project_page.add_description')}
+              multiline
             />
-          </AdminContent>
+          </span>
         </div>
-        {/if}
-        <div class="text-lg">{$t('project_page.description')}:</div>
-        <span class="text-secondary">
-          <EditableText
-            value={project.description}
-            disabled={!canManage}
-            saveHandler={updateProjectDescription}
-            placeholder={$t('project_page.add_description')}
-            multiline
-          />
-        </span>
       </div>
 
       <div>
@@ -455,32 +461,39 @@
 
       <div class="divider"/>
 
-      <MoreSettings>
-        <Button outline variant="btn-error" on:click={leaveProject}>
-          {$t('project_page.leave.leave_project')}
-          <Icon icon="i-mdi-exit-run"/>
-        </Button>
-        <ConfirmModal bind:this={leaveModal}
-                      title={$t('project_page.leave.confirm_title')}
-                      submitText={$t('project_page.leave.leave_action')}
-                      submitIcon="i-mdi-exit-run"
-                      submitVariant="btn-error"
-                      cancelText={$t('project_page.leave.dont_leave')}>
-          <p>{$t('project_page.leave.confirm_leave')}</p>
-        </ConfirmModal>
-        {#if canManage}
-          <button class="btn btn-error" on:click={softDeleteProject}>
-            {$t('delete_project_modal.submit')}
-            <TrashIcon/>
-          </button>
-          <AdminContent>
+      <MoreSettings column>
+        <div class="flex gap-4 max-sm:flex-col-reverse">
+          {#if canManage}
+            <button class="btn btn-error" on:click={softDeleteProject}>
+              {$t('delete_project_modal.submit')}
+              <TrashIcon/>
+            </button>
+            <Button outline variant="btn-warning" on:click={projectConfidentialityModal.openModal}>
+              {$t('project.confidential.set_confidentiality')}
+              <Icon icon="i-mdi-shield-lock-outline"/>
+            </Button>
+            {/if}
+          <Button outline variant="btn-error" on:click={leaveProject}>
+            {$t('project_page.leave.leave_project')}
+            <Icon icon="i-mdi-exit-run"/>
+          </Button>
+          <ConfirmModal bind:this={leaveModal}
+                        title={$t('project_page.leave.confirm_title')}
+                        submitText={$t('project_page.leave.leave_action')}
+                        submitIcon="i-mdi-exit-run"
+                        submitVariant="btn-error"
+                        cancelText={$t('project_page.leave.dont_leave')}>
+            <p>{$t('project_page.leave.confirm_leave')}</p>
+          </ConfirmModal>
+        </div>
+        <AdminContent>
+          <div class="divider m-0" />
+          <div class="flex gap-4 max-sm:flex-col-reverse">
             <button class="btn btn-accent" on:click={resetProject}>
               {$t('project_page.reset_project_modal.submit')}
               <CircleArrowIcon/>
             </button>
             <ResetProjectModal bind:this={resetProjectModal}/>
-            <Button on:click={verify}>Verify Repository</Button>
-            <Button on:click={recover}>HG Recover</Button>
             <Modal bind:this={hgCommandResultModal} closeOnClickOutside={false}>
               <div class="card">
                 <div class="card-body overflow-auto">
@@ -495,9 +508,11 @@
                 </div>
               </div>
             </Modal>
-          </AdminContent>
-          <ConfirmDeleteModal bind:this={deleteProjectModal} i18nScope="delete_project_modal"/>
-        {/if}
+            <Button on:click={recover}>HG Recover</Button>
+            <Button on:click={verify}>HG Verify</Button>
+          </div>
+        </AdminContent>
+        <ConfirmDeleteModal bind:this={deleteProjectModal} i18nScope="delete_project_modal"/>
       </MoreSettings>
 
     </div>
diff --git a/frontend/src/routes/(authenticated)/project/[project_code]/+page.ts b/frontend/src/routes/(authenticated)/project/[project_code]/+page.ts
index 91c80b127..a523be2e7 100644
--- a/frontend/src/routes/(authenticated)/project/[project_code]/+page.ts
+++ b/frontend/src/routes/(authenticated)/project/[project_code]/+page.ts
@@ -13,6 +13,8 @@ import type {
   DeleteProjectUserMutation,
   LeaveProjectMutation,
   ProjectPageQuery,
+  SetProjectConfidentialityInput,
+  SetProjectConfidentialityMutation,
 } from '$lib/gql/types';
 import { getClient, graphql } from '$lib/gql';
 
@@ -42,6 +44,7 @@ export async function load(event: PageLoadEvent) {
 						lastCommit
 						createdDate
 						retentionPolicy
+						isConfidential
 						users {
 							id
 							role
@@ -89,7 +92,7 @@ export async function load(event: PageLoadEvent) {
         }
       `),
       { projectCode }
-  );
+    );
 
   const nonNullableProject = tryMakeNonNullable(projectResult.projectByCode);
   if (!nonNullableProject) {
@@ -258,6 +261,30 @@ export async function _changeProjectDescription(input: ChangeProjectDescriptionI
   return result;
 }
 
+export async function _setProjectConfidentiality(input: SetProjectConfidentialityInput): $OpResult<SetProjectConfidentialityMutation> {
+  //language=GraphQL
+  const result = await getClient()
+    .mutation(
+      graphql(`
+        mutation SetProjectConfidentiality($input: SetProjectConfidentialityInput!) {
+          setProjectConfidentiality(input: $input) {
+            project {
+              id
+              isConfidential
+            }
+            errors {
+              ... on Error {
+                message
+              }
+            }
+          }
+        }
+      `),
+      { input: input }
+    );
+  return result;
+}
+
 export async function _deleteProjectUser(projectId: string, userId: string): $OpResult<DeleteProjectUserMutation> {
   const result = await getClient()
     .mutation(
@@ -284,7 +311,7 @@ export async function _deleteProjectUser(projectId: string, userId: string): $Op
 }
 
 export async function _refreshProjectRepoInfo(projectCode: string): Promise<void> {
-    const result = await getClient().query(graphql(`
+  const result = await getClient().query(graphql(`
         query refreshProjectStatus($projectCode: String!) {
             projectByCode(code: $projectCode) {
                 id
@@ -309,10 +336,10 @@ export async function _refreshProjectRepoInfo(projectCode: string): Promise<void
 
 
 export async function _leaveProject(projectId: string): $OpResult<LeaveProjectMutation> {
-//language=GraphQL
+  //language=GraphQL
   const result = await getClient()
-  .mutation(
-    graphql(`
+    .mutation(
+      graphql(`
       mutation LeaveProject($input: LeaveProjectInput!) {
         leaveProject(input: $input) {
           project {
@@ -324,11 +351,11 @@ export async function _leaveProject(projectId: string): $OpResult<LeaveProjectMu
         }
       }
     `),
-    {input: { projectId } },
-    //disable invalidate otherwise the page will reload
-    //and the user will be shown that they don't have permission for this project
-    {fetchOptions: {lexboxResponseHandlingConfig: {invalidateUserOnJwtRefresh: false}}}
-  );
+      { input: { projectId } },
+      //disable invalidate otherwise the page will reload
+      //and the user will be shown that they don't have permission for this project
+      { fetchOptions: { lexboxResponseHandlingConfig: { invalidateUserOnJwtRefresh: false } } }
+    );
 
   return result;
 }
diff --git a/frontend/src/routes/(authenticated)/project/[project_code]/OpenInFlexModal.svelte b/frontend/src/routes/(authenticated)/project/[project_code]/OpenInFlexModal.svelte
index caa08c398..097bf12b0 100644
--- a/frontend/src/routes/(authenticated)/project/[project_code]/OpenInFlexModal.svelte
+++ b/frontend/src/routes/(authenticated)/project/[project_code]/OpenInFlexModal.svelte
@@ -18,7 +18,7 @@
 <Modal bind:this={modal}>
   <div class="prose open-with-flex-modal max-w-none">
     <h3>{$t('project_page.open_with_flex.button')}</h3>
-    <div class="alert alert-info mb-4">
+    <div class="alert alert-info mb-4 not-prose">
       <span class="i-mdi-info-outline text-xl"></span>
       <Markdown md={$t('project_page.open_with_flex.supported_version')} plugins={[{ renderer: { a: NewTabLinkRenderer } }]} />
     </div>
@@ -44,8 +44,4 @@
   :global(.open-with-flex-modal .collapse-content > *) {
     margin: 0;
   }
-
-  :global(.open-with-flex-modal .alert p) {
-    margin: 0;
-  }
 </style>
diff --git a/frontend/src/routes/(authenticated)/project/[project_code]/ProjectConfidentialityBadge.svelte b/frontend/src/routes/(authenticated)/project/[project_code]/ProjectConfidentialityBadge.svelte
new file mode 100644
index 000000000..45d4ad9f6
--- /dev/null
+++ b/frontend/src/routes/(authenticated)/project/[project_code]/ProjectConfidentialityBadge.svelte
@@ -0,0 +1,26 @@
+<script lang="ts">
+  import t from '$lib/i18n';
+  import { BadgeButton } from '$lib/components/Badges';
+
+  export let isConfidential: boolean | undefined;
+  export let canManage: boolean;
+
+</script>
+
+{#if isConfidential !== false}
+  <BadgeButton variant={isConfidential ? 'badge-warning' : 'badge-neutral'}
+      on:click
+      disabled={!canManage}
+      icon={isConfidential === undefined && canManage ? 'i-mdi-pencil-outline' : 'i-mdi-shield-lock-outline'}
+      hoverIcon="i-mdi-pencil-outline">
+    {#if isConfidential}
+      {$t('project.confidential.confidential')}
+    {:else if canManage}
+      <span class="text-warning">
+        {$t('project.confidential.set_confidentiality')}
+      </span>
+    {:else}
+      {$t('project.confidential.confidentiality_unspecified')}
+    {/if}
+  </BadgeButton>
+{/if}
diff --git a/frontend/src/routes/(authenticated)/project/[project_code]/ProjectConfidentialityModal.svelte b/frontend/src/routes/(authenticated)/project/[project_code]/ProjectConfidentialityModal.svelte
new file mode 100644
index 000000000..03e61bd5d
--- /dev/null
+++ b/frontend/src/routes/(authenticated)/project/[project_code]/ProjectConfidentialityModal.svelte
@@ -0,0 +1,51 @@
+<script lang="ts">
+  import { DialogResponse, FormModal } from '$lib/components/modals';
+  import { ProjectConfidentialityCombobox } from '$lib/components/Projects';
+  import { useNotifications } from '$lib/notify';
+  import { z } from 'zod';
+  import { _setProjectConfidentiality } from './+page';
+  import t from '$lib/i18n';
+
+  export let projectId: string;
+  export let isConfidential: boolean | undefined;
+
+  const schema = z.object({
+    isConfidential: z.boolean(),
+  });
+  let formModal: FormModal<typeof schema>;
+  $: form = formModal?.form();
+
+  const { notifySuccess, notifyWarning } = useNotifications();
+
+  export async function openModal(): Promise<void> {
+    const originalValue = isConfidential;
+    const { response, formState } = await formModal.open({ isConfidential: isConfidential ?? false }, async () => {
+      const { error } = await _setProjectConfidentiality({
+        projectId,
+        isConfidential: $form.isConfidential,
+      });
+
+      return error?.message;
+    });
+
+    if (response === DialogResponse.Submit && formState.isConfidential.currentValue !== originalValue) {
+      if (formState.isConfidential.currentValue) {
+        notifyWarning($t('project.confidential.modal.project_now_confidential'));
+      } else {
+        notifySuccess($t('project.confidential.modal.project_now_not_confidential'));
+      }
+    }
+  }
+</script>
+
+<FormModal bind:this={formModal} {schema} submitVariant={$form?.isConfidential ? 'btn-warning' : 'btn-primary'}>
+  <span slot="title">{$t('project.confidential.modal.title')}</span>
+  <ProjectConfidentialityCombobox bind:value={$form.isConfidential} />
+  <span slot="submitText">
+    {#if $form.isConfidential}
+      {$t('project.confidential.modal.submit_button_confidential')}
+    {:else}
+      {$t('project.confidential.modal.submit_button_not_confidential')}
+    {/if}
+  </span>
+</FormModal>
diff --git a/frontend/src/routes/(authenticated)/project/create/+page.svelte b/frontend/src/routes/(authenticated)/project/create/+page.svelte
index 6ef10eefb..46e60443f 100644
--- a/frontend/src/routes/(authenticated)/project/create/+page.svelte
+++ b/frontend/src/routes/(authenticated)/project/create/+page.svelte
@@ -15,6 +15,7 @@
   import { derived, writable } from 'svelte/store';
   import { concatAll } from '$lib/util/array';
   import { browser } from '$app/environment';
+  import { ProjectConfidentialityCombobox } from '$lib/components/Projects';
 
   export let data;
   $: user = data.user;
@@ -37,6 +38,7 @@
       .min(4, $t('project.create.code_too_short'))
       .regex(/^[a-z\d][a-z-\d]*$/, $t('project.create.code_invalid')),
     customCode: z.boolean().default(false),
+    isConfidential: z.boolean().default(false),
   });
 
   //random guid
@@ -49,6 +51,7 @@
       description: $form.description,
       type: $form.type,
       retentionPolicy: $form.retentionPolicy,
+      isConfidential: $form.isConfidential,
       projectManagerId: requestingUser?.id,
     });
     if (result.error) {
@@ -109,6 +112,7 @@
       if (urlValues.description) form.description = urlValues.description;
       if (urlValues.type) form.type = urlValues.type;
       if (urlValues.retentionPolicy && (urlValues.retentionPolicy !== RetentionPolicy.Dev || user.isAdmin)) form.retentionPolicy = urlValues.retentionPolicy;
+      if (urlValues.isConfidential === 'true') form.isConfidential = true;
       if (urlValues.code) {
         const standardCodeSuffix = buildProjectCode('', urlValues.type, urlValues.retentionPolicy);
         const isCustomCode = !urlValues.code.endsWith(standardCodeSuffix);
@@ -199,6 +203,11 @@
       error={$errors.description}
     />
 
+    <div class="mt-4 mb-2">
+      <!-- It feels appropriate to give this option a bit more real estate -->
+      <ProjectConfidentialityCombobox bind:value={$form.isConfidential} />
+    </div>
+
     <FormError error={$message} />
     <SubmitButton loading={$submitting}>
         {#if data.user.canCreateProjects}
diff --git a/frontend/src/routes/email/tester/+page@.svelte b/frontend/src/routes/email/tester/+page@.svelte
index 4ec380c5d..5c8f76d3e 100644
--- a/frontend/src/routes/email/tester/+page@.svelte
+++ b/frontend/src/routes/email/tester/+page@.svelte
@@ -46,12 +46,13 @@
                 code: 'myproj-test-onestory',
                 type: ProjectType.OneStoryEditor,
                 description: 'My project description',
-                retentionPolicy: RetentionPolicy.Test
+                retentionPolicy: RetentionPolicy.Test,
+                isConfidential: false,
             },
             user: {
                 name: 'Bob',
                 email: 'test@test.com'
-            }
+            },
         },
         {
             label: 'Create Project Request (Language Project)',
@@ -64,6 +65,7 @@
                 type: ProjectType.OneStoryEditor,
                 description: 'My project description',
                 retentionPolicy: RetentionPolicy.Verified,
+                isConfidential: true,
             },
             user: {
                 name: 'Bob',
@@ -82,6 +84,7 @@
                 description: 'My project description',
                 retentionPolicy: RetentionPolicy.Dev,
                 projectManagerId: '703701a8-005c-4747-91f2-ac7650455118', // manager from seeding data
+                isConfidential: true,
             },
             user: {
                 name: 'Bob',
diff --git a/frontend/tests/fixtures.ts b/frontend/tests/fixtures.ts
index bfbe16f36..390ed5e9f 100644
--- a/frontend/tests/fixtures.ts
+++ b/frontend/tests/fixtures.ts
@@ -97,7 +97,8 @@ export const test = base.extend<Fixtures>({
           type: FL_EX,
           code: "${code}",
           description: "temporary project created during the ${testInfo.title} unit test",
-          retentionPolicy: DEV
+          retentionPolicy: DEV,
+          isConfidential: false
         }) {
           createProjectResponse {
             id