User Level Role can invite an Admin
Author: marke-devCreated Jul 11, 2025Updated Sep 17, 2026
Labelstype: bugstale
Description
IMO User accounts should not be allowed send invites for role Admin. They can effectively make themselves admins
Reproduction steps
Send invite for a User role. Login as user. Got to Settings > Team > Add another member > Role (select admin)
Expected behavior
User should only be able to select User or Only see one option to be just User for Role selection. Or Users do not have ability to send invites at all
Actual Behavior with Screenshots
Operating system
Linux
Node Version
20
Provide any additional context for the Bug.
No response
Have you spent some time to check if this bug has been raised before?
- I checked and didn't find similar issue
Are you willing to submit PR?
None
Source: gitroomhq/postiz-app