Currently, anyone can add someone else or themselves as a member of a project. Add a new configuration option at the site level that restricts adding new members to a project to site staff and existing project members