Project selection requires read authorization #537

* enforce read auth for defaulted project selection