[Bug]: Configured admin user unable to copy/create a templated user unless 'manage_system' is enabled

[jeffkirkley]

⚠️ This issue respects the following points: ⚠️

• This is a bug, not a question or a configuration issue.
• This issue is not already reported on Github (I've searched it).

Bug description

Admin user unable to copy/create a templated user unless given granular 'manage_system' permission.

Steps to reproduce

Create a new Admin user under 'Admins'. Provide following permissions only: add_users, edit_users, view_users, view_status. Login as new admin user. Go into 'Users' tab and attempt to copy/create a templated user -- unable to.

Modify permissions of admin user and add 'manage_system'. Admin user can now copy/create a templated user for a new user to have defined permissions/ACLs.

However, by giving the user the permission of 'manage_system', this also allows them to make changes to SFTP, ACME, and SMTP. Desire is not to allow this ability - only want the admin user to have a limited set of user admin capabilities -- NOT be able to also manage the system.

Expected behavior

Expect admin user to be able to copy/create a templated user. NOT be able to also manage the system.

SFTPGo version

2.5.5

Data provider

internal sqlite DB

Installation method

Community Deb package

Configuration

none - default

Relevant log output

No response

What are you using SFTPGo for?

Private user, home usecase (home backup/VPS)

Additional info

No response