handle no subscription case
restrict project space API to superusers