Nuclio Dashboard correctly enforces OPA-based authorization on the project read path ("GET /api/projects"), populating "MemberIds" in "PermissionOptions" so OPA can filter results by user membership. However, the write paths ("PUT /api/projects/{id}" and "DELETE /api/projects") construct "PermissionOptions" without setting "MemberIds". The platform-layer "FilterProjectsByPermissions" function ("pkg/platform/abstract/platform.go:652") short-circuits when "MemberIds" is empty, bypassing OPA entirely. Any authenticated user who knows a project name can modify or delete that project, triggering cascading deletion of all associated Functions, APIGateways, and FunctionEvents. Affected: Nuclio v1.15.26 (latest Helm release) and HEAD commit e185454 (latest source). ***