Players can not open the box at Spawn. What permissions are required?
What is ‘the box’?
You probably have spawn-protection
enabled. You can disable that in the server.properties file, or (if you’re using permissions) give them the override permission minecraft.spawn-protection.override
.