Restrict group member listing to sysadmin users
Allow organization editors and admins to view the member list
Merge branch '720-limit-user-information'