When you add a user to repository, their permissions all default to Allowed.

This is troublesome when adding freelance and outside workforce to projects.

Alternatively add sensible presets (artist, programmer, admin) that are easy to apply.