Add option to prevent transfer of projects and subgroups outside of top level group

Problem

Currently it is possible for a user to be an Owner in a subgroup but have lower roles in their top level group. This means that they have the capability to transfer projects and subgroups to another namespace that might be outside of their top level group. This can be a potential issue if the user inadvertently transfers a project or subgroup to a different namespace causing a security concern.

Proposal

Only Organization Owners should have the right to transfer groups and projects to another Organization. Group and project Owners should have the right transfer groups and projects within their Organization.

Intended users

• Parker (Product Manager)
• Delaney (Development Team Lead)
• Sasha (Software Developer)
• Amy (Application Security Engineer)
• Cameron (Compliance Manager)