Issue Summary

(Note:Not applicable for instances on improved user management experience)

Basic users in Jira Cloud can invite Assignees by using the +Add Teammate option when user invites are disabled in the Site admin page > Site Access > User invites > "Existing users can send invitations to anyone" options is unchecked.

The invites user then waits for admin access approval and site-admins can deny access through the option - Access requests found in the site admin page (admin.atlassian.com).

Steps to Reproduce

1. As a site-admin, disable "Existing users can send invitations to anyone" under Site admin page > Site Access > User invites.
2. Let a basic user go to any issue in any project and under the Assignee field, have them type an email that's not already a user in the instance. This would show an option for them to "+Add teammate"
3. Basic user can proceed to send an invite to this user even when invites have been disabled.
4. Site-admins can then approve or reject the access request.

Expected Results

Basic users should not be able to invite any user through any field after the site-admin sets user invites to not be sent by existing users (which affects basic users).

Actual Results

Basic users can successfully send out an invite to emails outside of Jira Cloud's userbase.

Workaround

No workaround available.