Access Control: Allow org admins to invite new users (#52894)

* allow org admins to invite new users to Grafana

* doc updates

* fix test

pkg/api/org_invite.go

@@ -84,15 +84,6 @@ func (hs *HTTPServer) AddOrgInvite(c *models.ReqContext) response.Response {
 		return hs.inviteExistingUserToOrg(c, userQuery.Result, &inviteDto)
 	}
 
-	// Evaluate permissions for inviting a new user to Grafana
-	hasAccess, err := hs.AccessControl.Evaluate(c.Req.Context(), c.SignedInUser, ac.EvalPermission(ac.ActionUsersCreate))
-	if err != nil {
-		return response.Error(http.StatusInternalServerError, "Failed to evaluate permissions", err)
-	}
-	if !hasAccess {
-		return response.Error(http.StatusForbidden, "Permission denied: not permitted to create a new user", err)
-	}
-
 	if setting.DisableLoginForm {
 		return response.Error(400, "Cannot invite when login is disabled.", nil)
 	}
@@ -103,6 +94,7 @@ func (hs *HTTPServer) AddOrgInvite(c *models.ReqContext) response.Response {
 	cmd.Name = inviteDto.Name
 	cmd.Status = models.TmpUserInvitePending
 	cmd.InvitedByUserId = c.UserId
+	var err error
 	cmd.Code, err = util.GetRandomString(30)
 	if err != nil {
 		return response.Error(500, "Could not generate random string", err)