Fix tests after rewrite of file upload
Show permissions on project page
Fix permission setting as it should be

Should set the correct type of object before giving it to mongoose. pre.save may be useful, but for something else.