fix(permissions): restrict deletes and admin member management

apps/clients/services/clients.py

@@ -19,11 +19,13 @@ def create_client(user, workspace_id, name, notes=""):
     if Client.objects.filter(workspace_id=workspace_id, name=name, is_deleted=False).exists():
         raise ValidationError({"name": "مشتری با این نام در این فضای کاری وجود دارد."})
 
-    return Client.objects.create(
-        workspace_id=workspace_id,
-        name=name,
-        notes=notes
-    )
+    return Client.objects.create(
+        workspace_id=workspace_id,
+        name=name,
+        notes=notes,
+        created_by=user,
+        updated_by=user,
+    )
 
 
 def update_client(client, name=None, notes=None):