only staff can add attachment after select project
only staff can access pro-category