Article author permissions.
Project project_head and collaborator permissions.
Fixed HTML rendering. Add a safe tag to every variable with HTML content.
Delete perms only to project_heads.