This afternoon, our orgs slack began acting strangely. Suddenly anyone can manage posting permissions, message retention, or even create shared channels (with outside organizations).

We fixed the latter, but are working on the first two which seem to be accessible to all users.

Hope it's helpful.