ensuring that the user has proper permissions to create another user of a specific role