If a user is added to a board in an organization they are not a member of, they have permission to create new boards within that organization. Not sure if this is intended. Tested with both restyaboard v0.6.9 and v1.7.
Steps to reproduce the issue:
Create a new organization with a group of users
Create a new board in the organization
Add a user to the board who is not in the organization
The user can now create new boards in the organization they are not a member of
@daryl-o We have checked about the issue and for adding the board, the "Add Board" permission is managed on the user level permission and not among the organization level
If a user is added to a board in an organization they are not a member of, they have permission to create new boards within that organization. Not sure if this is intended. Tested with both restyaboard v0.6.9 and v1.7.
Steps to reproduce the issue: