Bug: User able to add/update users without sufficient permissions

[kartik-579]

📜 Description

In some cases, a user is able to create/update another user or permission group even if not having sufficient permissions.

👟 Reproduction steps

1. Try to add user with view only permission only devtron apps, it gets successful.
2. Downgrade superadmin user(given through a permission group) with a non-superadmin user, it gets completed successfully.

👍 Expected behavior

User should not be able to give permissions with lower level of permission set.

👎 Actual Behavior

User is able to give permissions with lower level of permission set.

☸ Kubernetes version

1.23

Cloud provider

🌍 Browser

Chrome

🧱 Your Environment

No response

✅ Proposed Solution

No response

👀 Have you spent some time to check if this issue has been raised before?

• I checked and didn't find any similar issue

🏢 Have you read the Code of Conduct?

• I have read the Code of Conduct