Role add/remove endpoints incorrectly enforce a target-user hierarchy check

(#539) Bug Needs triage api moderation

Thread

Comment by Rex
RexSystem 1 vote
Status changed from Fixed to Needs triage
Reopened because it was bulk closed with no evidence of a fix.