first round of review

frontend/app/admin/invites/page.tsx

@@ -43,7 +43,7 @@ export default function AdminInvitesPage() {
   const [createError, setCreateError] = useState<string | null>(null);
   const [users, setUsers] = useState<UserOption[]>([]);
   const { user, isLoading, isAuthorized } = useRequireAuth({
-    requiredPermission: Permission.VIEW_AUDIT, // Admins have this
+    requiredPermission: Permission.MANAGE_INVITES,
     fallbackRedirect: "/",
   });