diff --git a/services/web/app/src/Features/Collaborators/CollaboratorsRouter.js b/services/web/app/src/Features/Collaborators/CollaboratorsRouter.js
index e639580aca..da0b9677b3 100644
--- a/services/web/app/src/Features/Collaborators/CollaboratorsRouter.js
+++ b/services/web/app/src/Features/Collaborators/CollaboratorsRouter.js
@@ -68,7 +68,8 @@ module.exports = {
     webRouter.get(
       '/project/:Project_id/members',
       AuthenticationController.requireLogin(),
-      AuthorizationMiddleware.ensureUserCanAdminProject,
+      AuthorizationMiddleware.blockRestrictedUserFromProject,
+      AuthorizationMiddleware.ensureUserCanReadProject,
       CollaboratorsController.getAllMembers
     )