CUNY Academic Commons

Thanks for the report. I was able to track down the issue, which is due to a conflict in cac-onboarding. That plugin, which powers the 'Send Invites' tool, hooks into the group- and site-join process, so that it can process group/site invitations. Eg, when you invite Joe to join the Commons and become an Author on your site Foo, we run a routine after Joe joins the Commons to ensure that (a) Joe is a member of Foo, and (b) Joe has the role of Author on Foo. The WP action that we hook into for this is run both on the initial site join as well as when the role of an existing member is changed. In this case, the user was being successfully demoted to Author; but the cac-onboarding routine was running immediately afterward, and recognizing that this user was originally invited to the site with role Administrator, and thus was being (re-)granted that role.

Anyway, the solution is that the cac-onboarding routine should only pull up pending invitations. This ensures that users get the proper role when first accepting an invite, but that future role changes aren't overwritten. See https://github.com/cuny-academic-commons/cac-onboarding/commit/27b6b1d89d8ab9dad581775347be3b831e8bdd43

This change will be part of the 2.0.1 release. In the meantime, I've manually demoted the user in question.