Organisation: make certain roles unable to view other members and open invitations
As the title says, I can't find any reference to access control related to this. For example: I want only admins able to invite users, but if a user now does a
get full organisation
get full organisation
api call, it sees all other members and open invitations. How do I block this access?