[Self-Hosted] SSO provisioned users can do actions they shouldn't

(#702) Bug Needs triage security self-hosting

Thread

Deleted comment
Removed by moderator Rex: Removed a general status note that was posted on many GitHub threads. It no longer applies here.