In function isUserAllowed() it is only checked if: 1. any user is assigned to the project (if no then allow anybody) 2. if logged user is allowed for given project But also _admin_ users _not assigned_ to the project shall be allowed.