Custom Role not restricting as expected.

[creecros]

This software focus on simplicity, the number of features is voluntary limited.

Actual behaviour

I spun up a clean docker v1.21 of kanboard for testing. Created a Custom Role with the following:

Applied this project role to a test account, and that account has most of the Actions to edit a task.:

They can add files, remove files, comment, remove comments, create links, remove link, etc...Confirmed, the task was not assigned to that user.

Expected behaviour

Applying every restriction should remove all Task editable actions.

Steps to reproduce

Create a custom role, apply all project restrictions.

Screenshots

Made more sense to put screenshots above where I am referring to them.

Configuration

Kanboard version: 1.21
Application version: master.8372202a7c96d53ea6db82fb507db72cee478d72
PHP version: 7.1.15
PHP SAPI: fpm-fcgi
OS version: Linux 4.9.45-rancher
Database driver: sqlite
Database version: 3.21.0
Browser: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36

[creecros]

It's really the

That's not working as expected.

[creecros]

I take that back, I am also able to Duplicate a task:

which goes against

[oalexandrino]

any update of this issue? I am using on June, 2020 and it is not working as expected yet.