Dropdown and remove button appears next to Owner members for Project Maintainers
A project maintainer has the ability to update and remove direct Project members with role up to and including Maintainer, but not direct Project Owners.
At the moment the dropdown to edit the role of, and the button to "Remove" members appears next to Project direct Owner members, even though that action is not allowed.
As for the dropdown next to direct Project Owners - it should just be a badge because it's not editable by a user with Maintainer role.
To reproduce
- Sign in as an Admin (
User1
) - Invite another member as a Project Maintainer (
User2
) - Invite another member as a Project Owner (
User3
) - Impersonate
User2
- View the Project Membership page and see the
Remove
button appearing next toUser3
. - Click
Remove
- 403 page results
Edited by charlie ablett