Issue

Mendix Admins are no longer able to add themselves to Company apps.

Environment

Mendix Portal

Cause

This change was introduced intentionally as part of ongoing security improvements.
A Mendix Admin can no longer invite themselves to company apps, a scrum master or another member with the required permissions will need to invite them to the app.
 
In Mendix's continuous efforts to make Sprintr more secure, the system is regularly submitted to PEN tests by a third party. In one of these tests it was noted that under certain circumstances it was possible for users to invite themselves to a project. The team has decided to block any user from being able to invite themselves, regardless of their position. This policy is in line with industry standards where access to a resource is always granted by someone else, preferably someone with the same or higher permissions. Please do not share these internal details in a ticket, but this information provides context around the change.
 
Company admins should always be allowed to perform "administrative" tasks even if they are not a team member. For example, in Sprintr they can add and remove team members without being a team member. (They just can not add themselves). However, if Mendix allows users to give themselves access to a project, they could also give themselves access to the repository and that goes beyond the scope of administrative tasks.

Solution / Workaround

There is no workaround as the current behavior is intentional and will remain in place as part of ongoing security improvements.

Additional information

• Mendix documentation: Viewing App Details