Creating a project fails when uploading an avatar if user is not Admin or Sysadmin

When a user with PROJECT_CREATE permission tries to create a project with an avatar, they receive the following error when submitting the form:

You are not permitted to access this resource

Workaround
The user must create a project without an avatar, and upload the avatar when the project has been created.