add right for project owner and viewer