Error messages saving projects

...also fixes some permissions issues in the API.