fixed projects spec for authorization