What happened?
When a staff role is given permission to manage locations then that role is able to manage/view those locations which he doesnt have access to. This is a critical flaw as per restaurant POV.
What did you expect to happen?
staff role with that permission should be manage that locations which the staff has access to
Version
4.x
What browser are you seeing the problem on?
No response
Relevant log output