Separate permissions for creating Groups from creating Subgroups
Description
When using groups as namespaces for large business units, having the ability for everyone to create groups at the top level is undesirable.
Turning it off entirely (or rather, creating users with the permission defaulting to Off) is also troublesome, since the owner of a group may want to allow people in his group to create subgroups as needed.
The main goal here is to limit top level namespace pollution.
Proposal
Limit the "can create groups" permission flag that is set at the user level to the top level groups, then add a role permission for Masters or Owners to create subgroups. (Different solutions might be good as well, we just would like to restrict top level namespace pollution)
Links / references
Documentation blurb
To limit namespace pollution, the ability to create groups can be turned off for newly created users.
This feature affects only top level groups - group members with the necessary permission can still create subgroups within their group.