permission spec for copy_projects