header, wrap for project permissions