Projects & Kanban
Project Access Policies
Fine-grained authorization rules controlling issue creation and deletion permissions.
To maintain security and prevent unauthorized modifications across critical work streams, each project operates under a customizable Access Policy.
Policy Modes
Project administrators (Team Leaders) can toggle between three governance levels:
| Policy Mode | Issue Creation | Issue Deletion | Best Suited For |
|---|---|---|---|
ADMIN_ONLY | Team Leader only | Team Leader only | Restricted release branches and critical system tasks |
MEMBERS_CREATE | All Team Members | Team Leader only | Standard agile sprints requiring curated backlog cleanup |
OPEN_COLLABORATION | All Team Members | All Team Members | Hackathons, open ideation, and rapid internal testing |
Enforcing Server-Side Validation
Security First Architecture
Policies are strictly enforced on both the client interface and the server
layer. Even if a user bypasses UI controls, server actions re-evaluate
permissions using Zod schemas and custom validation middleware before
committing any changes to the database.
Changing Policy Rules
- Navigate to Project Settings > Security Policy.
- Select the desired policy from the dropdown menu.
- Save changes — permissions update instantly across all connected sessions.