all project actions now can only be done by admins