It would be great to have a user role where the user can create a repository in a project but cannot make changes to the project permissions. We like to let our project leads create repos in their projects, but sometimes our leads like to switch the project or repos in the project to global access, which is not allowed. Also, project admins like to mess with project permissions. We want to allow the project lead to add new repos if needed but we don't want them having access to other admin rights on that project.