Allow admins to invite groups despite group share prevention settings

Release notes

GitLab Admins can continue to share projects with groups even if "Prevent sharing a project within Group with other groups" settings is enabled on the Group

Problem to solve

This particularly applies to self-managed instances.

When "Prevent sharing a project within Group with other groups" is set at a group level, the GitLab Admin accounts are also prevented from inviting groups that lie outside.

This restriction should not apply to administrator roles, and only to member roles within the project.

As a result of this restriction applying to non-member admin accounts, the workaround requires disabling this setting every time the administrators need to make a controlled change to memberships, or adding administrators as Owner members to all groups.

Proposal

Allow every action to administrator type accounts, including allowing them to invite external groups on projects that are under a group with the above setting enabled on it.

Intended users

Metrics

TBD

Edited by Harsh Chouraria