Summary  

Users whom have Plan level Admin privileges, but not Project level Admin privileges are able to change the Project name from /chain/admin/config/editChainDetails.action?buildKey={projkey}-{plankey} 

Steps to Reproduce

Step 1

Create Project with key TSTPR
Create Plan within TSTPR with key PLANA
Assign user with Plan Admin Privileges, but not Project admin privileges

Step 2

edit PlanA details from /chain/admin/config/editChainDetails.action?buildKey=TESTPR-PLANA/
change Project Name
click save

Expected Results

error for insufficient privileges, or move plan to a new project with a new name

Actual Results

Project Name Changes (but still has same project key)

Workaround