BUGFIX: namespace collision for MODAL_URLS, combined & placed in app.js
create new object-level project permission for submitting process requests