pushed the clean request call after the permission check. Otherwise it will unnecessary operation
adding user to invidet projects