GroupMembersFinder returns elevated role for the invited group members

Steps:

  1. Create a group called Invited group and add a member Member1 with Maintainer role to it.
  2. Created another group called Shared group and add Invited group as its member with Guest role.
  3. Get all the members of the Shared group using the /api/v4/groups/<shared-group-id>/members/all API.
  4. The API returns Member1 as a Maintainer (access_level: 40) but since the Shared group was added as a Guest, Member1 should have Guest access in the Shared group
flowchart TB
    subgraph SharedGroup
      B(Owner/You)
    end
    subgraph InvitedGroup
      A(Owner/You)
      Member1
    end
InvitedGroup -->|SharedGroup has InvitedGroup as its member| SharedGroup