diff -ruN roundup-1.4.8.orig/roundup/cgi/actions.py roundup-1.4.8/roundup/cgi/actions.py
--- roundup-1.4.8.orig/roundup/cgi/actions.py	2009-03-18 07:49:57.000000000 +0900
+++ roundup-1.4.8/roundup/cgi/actions.py	2009-04-27 11:32:33.000000000 +0900
@@ -644,9 +644,9 @@
             return
 
         # guard against new user creation that would bypass security checks
-        for key in props:
-            if 'user' in key:
-                return
+        #for key in props:
+        #    if 'user' in key:
+        #        return
 
         # handle the props - edit or create
         try: