Project-scoped members no longer see role and invite controls they can't use
Members with project-level access could see role-change and invite controls in the Members panel that would fail with an error when used. Those controls are now hidden or disabled based on what the member's scope actually permits.
The fix covers three surfaces. In the invite wizard, scope cards for Portfolio, Location, or Project are disabled (with a tooltip explanation) when your access level doesn't include the right to invite at that level. In the member drawer, the edit and remove controls on individual rows are now hidden for any row that falls outside your scope — a Location manager, for example, can no longer see controls for grants above their level. In the location members panel, the Invite members button is hidden when your access doesn't allow inviting at that location; the Manage organization members link remains visible. Portfolio Admins and full organization admins retain unchanged access across all surfaces.