start converting controller dependencies to ModelService
slight change to get_project_permissions to also return values for superusers