bugfix
change permission management to project-based permissions