Currently, when a user is inviting other users to an account, they are shown suggestions of users to invite based on the email address they are typing.
This poses a privacy issue, as the account admin can effectively see all the users in an instance.
We should redesign the flow so that a user can still invite multiple users to an account using the account invitation feature, but we don't auto-suggest any users when they start typing.
- Design for the Classic theme first
- Design for Minium once the classic theme is stabile
- Add a step in the invite process where the person who is inviting the new member to an account needs to define at least one account role. This should be a multi-select set of checkboxes similar t how a user can manage the roles that account members have (existing functionality – see Minium account widget). They cannot invite the user without giving the user at least one account role.