mirror of
https://github.com/makeplane/plane.git
synced 2026-09-03 04:29:57 +02:00
The positive-control tests authenticate as create_user, who was an ADMIN (role 20) member of project_b — so they exercised the ADMIN path, not MEMBER, despite the "member" docstrings. Make create_user a project MEMBER (role 15) so the positive controls validate the ROLE.MEMBER branch of @allow_permission on the newly-guarded handlers (all allow [ADMIN, MEMBER]; admin is covered elsewhere). Co-authored-by: Plane AI <noreply@plane.so>