Why are non-admins allowed to remove a board from a Team?

[adamwwg]

After opening Menu > More > Settings > Change Team, and clicking on the team name, a board was removed from our team. I'm not an admin. Furthermore, there was no indication that clicking the team name would convert the board to a personal board, and there is no "undo" option available.

[Stephen Addis]

Its as you need permission settings, a feature thats only on the paid plans ... possibly a reason they leave it to intice you to upgrade.

[adamwwg]

This bug is a security risk. A disgruntled employee could remove a board from their team, effectively denying the team access to the content on the board. Anyway, Trello confirmed the bug and said they are going to fix it.

[adamwwg]

(I was trying to figure out how to rename the board, in the settings. But again, I'm not an admin, so it seems I can't do that.)

[Michael Pryor]

I'd like to try to reproduce this. 

Can you paste a screenshot of the top part of the board including the name and the whole Trello header?

When I tried to reproduce this, the team controls under Menu -> More -> Settings were all disabled.

[adamwwg]

This is the board currently. You can see "AL" is a user on the board. That's me. No admin badge. It now says private where our team name used to be.

Here's another board that is still on the team account.

[adamwwg]

For some reason on our team members section, it shows all of us are admins. But... that doesn't seem correct since I don't have the double arrow admin icon over my user icon on the board. And I can't rename the board. Is it restricted to whoever made the board?

Even if I am an admin, the fact that team removal isn't labeled is still a problem.

[Michael Pryor]

Can you send us a message from Trello (click on AL top right, help, send us a message) and point support to this convo and include the url to the first board?

[adamwwg]

Sent

[Michael Pryor]

RE: "all of us are admins" on the team page -> this is actually correct. In Free Teams, all users on a team are admins.  But being the admin of a Team is not the same as being the admin of a Board.   So there's some interplay there ...

I wonder if it is because as the team admin, you can remove any board in the team from that team.  But once it is removed - since you are not a board admin - you cannot move it back (because now your ownership over the board is gone).