Permissions

`ANAF :users` is correct, since the association is `users` – not `user`.

In your `fields_for` method, you should have `fields_for :users` – have you tried that as well?