      def create
        if params[:user]
          roles = params[:user].delete("spree_role_ids")
        end

        @user = Spree::User.new(params[:user])
        if @user.save

          if roles
            @user.spree_roles = roles.reject(&:blank?).collect{|r| Spree::Role.find(r)}
          end

          flash.now[:notice] = t(:created_successfully)
          render :edit
        else
          render :new
        end
      end
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.