add permissions for project based repository api access