Projects Security in Non-HTML Forms?

I'm working on a Projects Security Design and need to explain the various Projects-based Security features.  I have a good understanding of how each works, but the documentation is confusing and contradictory as far as which feature can only be used with HTML versus Non-HTML pages. I know I have to test all scenarios, but I wanted to see if I could eliminate some that can't be used in our environment, which is non-html based.  I need a definitive answer on the following: 1) Can Organization Security for Project Authority be used with non-html pages; and 2) Can Project Access Level be