[BUG] ListMemberAPI is allowing users without owner permissions to list all the members of a Group

ListMemberAPI should only allow the owners of Group to list all the members of a group. This hard-coded check here grants all the users Admin permissions and therefore access to all the members of a group

GitLab is undergoing maintenance. Expect to be completed by 22:00 ET

[BUG] ListMemberAPI is allowing users without owner permissions to list all the members of a Group