621 determine permissions from project permissions

Closes #621