Improper Privilege Management

github.com/argoproj/argo-cd is vulnerable to Improper Privilege Management. The vulnerability is due to improper checks to prevent users with the create privilege from syncing local manifests. An attacker can exploit this vulnerability to bypass git merge protections by syncing local manifests on app creation.