fixed up permissions uniqueness validations; added level method and improved project method in AccessLevel