es.yml and projects/items permissions check