Security fine tuning

- crud form refinements
- workflow changes (cycle, projet) due to a bug when you add a
permission => hazardous things happen !