Hi,

there is a bug on the new project_add_users function inside the project_api.php.
Seems that the update code is not taking care about the project_id:

if( !empty( $t_updating ) ) {
$t_update = new DbQuery( 'UPDATE {project_user_list} SET access_level = :new_value WHERE user_id = :user_id' );
foreach( $t_updating as $t_id ) {
$t_params = array( 'user_id' => (int)$t_id, 'new_value' => $t_changes[$t_id] );
$t_update->execute( $t_params );
unset( $t_changes[$t_id] );
}
}

In this way like you can see you will update the role of the user for ALL the project where the user is enabled.
i Think this is a big update bug, please could you insert the project_id on the where condition?

Thank you

Fabio