On the projects list (https://secure.phabricator.com/project/query/active/) we should hide the "Members" link if the user does not have the Can Edit capability of that specific project.
Currently if you click the link, you get a lovely error that you can't view the page.