the end user can delete everything

Hi all,

I have set up an project with two users and two activities. One activity for each user.

Both users have Subscriber role and the minimum User Role to change Settings, Edit/Delete data, Enable/View Debug, etc is Administrator.

I am wondering why all users can see and delete all activities and can edit and delete the whole project.

Let me know if this behavior is on my side and I should dig into it until I have found my configuration error or if this behavior is by design and I should accept it.

Thanks a lot
Miguel

https://wordpress.org/plugins/collabpress/