User with can_manage access can drop own permissions by making "private"
[login federation] [experiment run from satellite cluster] [WB2]
Steps to reproduce:
- give another user can-manage on a project
- log in as the other user
- go to sharing dialog for the project
- change the sharing to "Only you can access / Private"
At this point the other user gets kicked out from viewing the project immediately. This is confusing UX. The "only you" means the user who owns the collection, not the 'other user' who has can-manage permissions on it.
TODO: rephrase to avoid confusion, or make it impossible for non-owners to change the sharing level (public/shared/private) on projects.
TODO: check if the same issue exists with collections, and if so, also fix that.