only admins can create/change projects