From ffb3247cdc39bd04ebbe69506f5d6b9e13805a61 Mon Sep 17 00:00:00 2001
From: Pete Matsyburka <pete@docuseal.com>
Date: Sun, 9 Aug 2026 18:37:53 +0300
Subject: [PATCH] add authorize user

---
 app/controllers/users_controller.rb | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/app/controllers/users_controller.rb b/app/controllers/users_controller.rb
index 2d8f818f..0b611381 100644
--- a/app/controllers/users_controller.rb
+++ b/app/controllers/users_controller.rb
@@ -75,6 +75,8 @@ class UsersController < ApplicationController
       authorize!(:manage, account)
 
       @user.account = account
+
+      authorize!(:create, @user)
     end
 
     if @user.update(attrs.except(*(current_user == @user ? %i[password otp_required_for_login role] : %i[password])))