I hope you are doing well.
I am not certain if this change in version 11 completely explains your issue, but there was actually a permission change in this area in version 11, which came out on Saturday, October 26th. Here is a link to that section of the release notes.
If someone manages a portfolio that contains projects, that portfolio manager can update/manage those projects. This is the exact permission in admin that you'd find inside your security roles: "Manage all projects in my Portfolios". However, that permission should be turned off by default for all clients.
Do you have this permission turned on in your environment?
Are you certain that pre version 11 reports in Analysis did not render the update button for users who are not on the project?