dsp-api
dsp-api copied to clipboard
Bug: User without system permission is able to create sys admin
I figured out, that a project admin can create new user, which is good, but he can also give the new user system admin permissions, which shouldn't be possible?!