add cancan for authorization

lib/ability.rb

@@ -0,0 +1,16 @@
+# frozen_string_literal: true
+
+class Ability
+  include CanCan::Ability
+
+  def initialize(user)
+    can :manage, Template, account_id: user.account_id
+    can :manage, Submission, template: { account_id: user.account_id }
+    can :manage, Submitter, template: { account_id: user.account_id }
+    can :manage, User, account_id: user.account_id
+    can :manage, EncryptedConfig, account_id: user.account_id
+    can :manage, AccountConfig, account_id: user.account_id
+    can :manage, Account, id: user.account_id
+    can :manage, AccessToken, user_id: user.id
+  end
+end

lib/templates/clone_attachments.rb

@@ -5,7 +5,7 @@ module Templates
     module_function
 
     def call(template:, original_template:)
-      original_template.documents.each do |document|
+      original_template.documents.preload(:preview_images_attachments).each do |document|
         new_document = ActiveStorage::Attachment.create!(
           uuid: document.uuid,
           blob_id: document.blob_id,