permission revoke table is now per projects (with a common configurable name), and projects can be configured