project can be nil when the access is denied