People who are not members of a board can no longer add labels to it or change labels on its tasks. They now get a "Forbidden" response from the server. Board members continue to create, add, and remove labels as before. This prevents unauthorized users from labeling tasks on boards they do not belong to, closing a permission oversight that allowed cross-team label injection https://app.hypertask.ai/detail/project-15/7177.