Create a Universal permission which is limiting permissive to actions other than login, signup and commenting.

[alexdeathway]

The current permission structure grants the hosting entity, be it an individual or an organization, authority over cluster creation and regulation. Presently, organizational oversight extends to cluster control, and the cluster owner possesses the ability to regulate collaboration within the cluster but lack control who can create the cluster which introduce a potential vulnerability exists whereby a malicious actor could inundate the web application with an excessive number of clusters and notes(in his own cluster). Addressing this concern is imperative for maintaining the integrity and security of the system.