fixed:
1. permissions controller under multiselect records
2. editing expense when the projectAddNew permission has changed to "deny"