Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.
How to reproduce
In field permission make sure that project administrators does not have permissions on a field
Create an artifact and stay in place
-> the administrator can no longer update it