[Bug]: Cannot add a board member as non-admin/non-PO Project Manager #875

Open
opened 2026-02-04 21:32:07 +03:00 by OVERLORD · 1 comment
Owner

Originally created by @pklebba on GitHub (Nov 28, 2025).

Where is the problem occurring?

I encountered the problem while using the application (Frontend)

What browsers are you seeing the problem on?

Brave

Current behavior

A user who is assigned as a Project Manager for a project cannot add members to a board, unless they are also an admin or project owner

Desired behavior

A user who is a Project Manager for the current project should always be allowed to add other users to the board, regardless of whether they themselves are already a board member.

Board membership should not affect the ability to add users.

Admin and project owner permissions may optionally still grant add permissions, but they should not block managers.

Steps to reproduce

  1. Create a new project and board.
  2. Create or use another user account (User B), that is not admin and project owner
  3. In the project settings, assign User B as an Project Manager.
  4. Log in as User B.
  5. Open the board and attempt to add a new board member.

Other information

The root cause appears to be in the following condition in BoardMemberships component:

if (!isUserAdminOrProjectOwner(user)) {
  return !selectors.selectCurrentUserMembershipForCurrentBoard(state);
}

This treats "being able to add users" as the inverse of "being a board member", which is likely unintentional.

Originally created by @pklebba on GitHub (Nov 28, 2025). ### Where is the problem occurring? I encountered the problem while using the application (Frontend) ### What browsers are you seeing the problem on? Brave ### Current behavior A user who is assigned as a Project Manager for a project cannot add members to a board, unless they are also an admin or project owner ### Desired behavior A user who is a Project Manager for the current project should always be allowed to add other users to the board, regardless of whether they themselves are already a board member. Board membership should not affect the ability to add users. Admin and project owner permissions may optionally still grant add permissions, but they should not block managers. ### Steps to reproduce 1. Create a new project and board. 2. Create or use another user account (User B), that is not admin and project owner 3. In the project settings, assign User B as an Project Manager. 4. Log in as User B. 5. Open the board and attempt to add a new board member. ### Other information The root cause appears to be in the following condition in `BoardMemberships` component: ``` if (!isUserAdminOrProjectOwner(user)) { return !selectors.selectCurrentUserMembershipForCurrentBoard(state); } ``` This treats "being able to add users" as the inverse of "being a board member", which is likely unintentional.
Author
Owner

@meltyshev commented on GitHub (Nov 28, 2025):

Hi! Thanks for reporting this. This is intended behaviour - all simple board users (not admins or project owners) do not have access to all users in the system, but only to those who are available and loaded. So yes, if someone is demoted from the projectOwner role to a boardUser role, they will lose access to all users and will no longer be able to add them.

@meltyshev commented on GitHub (Nov 28, 2025): Hi! Thanks for reporting this. This is intended behaviour - all simple board users (not admins or project owners) do not have access to all users in the system, but only to those who are available and loaded. So yes, if someone is demoted from the `projectOwner` role to a `boardUser` role, they will lose access to all users and will no longer be able to add them.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/planka#875