add authorize user

2026-08-09 18:37:53 +03:00
parent c59c470321
commit ffb3247cdc
1 changed files with 2 additions and 0 deletions
@@ -75,6 +75,8 @@ class UsersController < ApplicationController
      authorize!(:manage, account)

      @user.account = account
+
+      authorize!(:create, @user)
    end

    if @user.update(attrs.except(*(current_user == @user ? %i[password otp_required_for_login role] : %i[password])))