App/config: access control restricted for "edit/add" project action