### **Environment**:

community.openproject.com

OpenProject 11.0.4

### **Steps to reproduce:**

1. Create a board (e.g. Status board) which has a project filter (e.g. "Subproject of") and filters either for certain projects users has not access to or filters our projects user has no access to.
2. User navigates to the board.

Example: Go to https://community.openproject.com/projects/openproject/boards/2905 and add filter for projects other users don't have access to. Then access that board as a user without access to those (sub-)projects.

### **Actual Behavior**

Board cannot be loaded / error displayed for all columns.

<figure Begin of the insertionclass="image op-uc-figure"><divEnd of the insertion Begin of the deletion class="op-uc-figure"><divEnd of the deletion class="op-uc-figure--content"><img class="op-uc-image" src="/api/v3/attachments/19965/content"></div></figure>

<figure Begin of the insertionclass="image op-uc-figure"><divEnd of the insertion Begin of the deletion class="op-uc-figure"><divEnd of the deletion class="op-uc-figure--content"><img class="op-uc-image" src="/api/v3/attachments/19966/content"></div></figure>

### **Expected Behavior**

The board is loaded.

Similar to work packages, users should - based on their permission - see only those work packages they have access to.

### Notes:

Possible solution:

* Begin of the insertionThe board/grid containsEnd of the insertion Begin of the deletion Issue another request withEnd of the deletion the Begin of the insertionfilters, then theyEnd of the insertion Begin of the deletion filters thatEnd of the deletion are Begin of the insertionused to getEnd of the insertion Begin of the deletion applied onEnd of the deletion the Begin of the insertionform (this    .apiV3Service.queries.form.loadWithParams) that returns theEnd of the insertion Begin of the deletion filters section (issue aEnd of the deletion query Begin of the insertionwithEnd of the insertion Begin of the deletion eg for type and project ignoringEnd of the deletion the Begin of the insertionfilters thatEnd of the insertion Begin of the deletion grouping (specifying pagesize 0, performance)) + provide &#39;valid\_subset=true&#39; parameter inEnd of the deletion the Begin of the insertionuser is not allowed to see out. End of the insertion Begin of the deletion queryEnd of the deletion
* Begin of the insertionWe canEnd of the insertion Begin of the deletion Check the result andEnd of the deletion compare Begin of the insertionthenEnd of the insertion the Begin of the insertionboard filtersEnd of the insertion Begin of the deletion query that we sentEnd of the deletion with the query Begin of the insertionfiltersEnd of the insertion Begin of the deletion returnedEnd of the deletion
* If there is any positive filter  (is) removed, the the entire board would become invalid &gt;&gt; Show global error message
* If there is no such a removed filter, we issue the normal filterset (columns + filters) and provide valid subset === true parameter Begin of the insertion

Problems: filters are in different format + it doesn&#39;t feel right.
Branch: fix/35563-hide-boards-user-is-not-allowedEnd of the insertion