created another helper and simplified project permissions as update and create priviledges can be the same
created ProjectPolicy specs