Invite access gives role management, even when it shouldn't.
complete
Matthew P. Schmidt
On my server, we segregated role management from user management, but it appears that anyone who can make an invite can invite someone into ANY role, thus circumventing that restriction.
Log In
Mayhul Arora
complete
This has been fixed! Users will only be allowed to create / view invitation links for roles that are scoped to their permissions.