increased privileges on staff account

How it was found

staff on partners without a store management permit can have access to the collaboration shop

steps for reproduction

1. Invite staff to partners without store management permission
2. accept the invitation and the staff has become a member of the partner
3. On the staff account, try to access the collaboration store that has been active with partners
4. staff can enter and have permissions according to those owned by the partner account

Impact

gives staff unauthorized access to see anything in the collaboration shop