We're currently trialling Atlas for our project comms and it appears as though anyone with access to Atlas has full edit access to everything - the most problematic of these is that they can set themselves as a 'contributor' for any project, and they can 'archive' any project.
Am I missing a config step or is this by design? If it's intentional then it's hugely limiting.
My expectation is that someone who's only signed in to "follow" a project for updates shouldn't be able to edit the project they're following, they should only be able to comment on updates or raise questions, etc.
