handle the NPE when protocol is updated but no projects are specified
modify /protocol PUT behaviour so that if no access rights are specified on PUT, the policies are not changed at all
(before it was replacing the policies with the default rights for the owner)