How can this ever go through for projects? package_permission will be nil