group_manager_full_access results in content owner having full access

[heddn]

When enabled the group manager will have all the permissions in the group.

The below doesn't meet expectations. It gives content owner full access on the content, including delete. I didn't grant this user delete permission. But they get it anyway.

In OgAccess:

    if ($config->get('group_manager_full_access') && $user->isAuthenticated() && $group instanceof EntityOwnerInterface) {
      $cacheable_metadata->addCacheableDependency($group);
      if ($group->getOwnerId() == $user->id()) {
        return AccessResult::allowed()->addCacheableDependency($cacheable_metadata);
      }
    }

[pfrenssen]

In OG the "group manager" is an alias for the owner of the group entity. So this flag controls full access for the group entity owner / author.

With "content owner" do you mean the owner of the group entity or of the group content entity?