Fix project_user role permissions