Users without the manage tags permission can still create new tags
Hello,
On CiviCRM 5.5.3, WordPress users that don't have the manage_tags permission can't access the civicrm/tag admin page but they can still create new tags on civicrm/contact/view by typing a tag name that does not exist yet in the Tags tab.
We expect them to not be able to create tags.
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information