feat(api): disable read-only for project