add authorize

app/controllers/accounts_controller.rb

@@ -23,6 +23,8 @@ class AccountsController < ApplicationController
     unless Docuseal.multitenant?
       @encrypted_config = EncryptedConfig.find_or_initialize_by(account: current_account,
                                                                 key: EncryptedConfig::APP_URL_KEY)
+
+      if can?(:manage, @encrypted_config)
         @encrypted_config.assign_attributes(app_url_params)
 
         unless URI.parse(@encrypted_config.value.to_s).class.in?([URI::HTTP, URI::HTTPS])
@@ -35,6 +37,7 @@ class AccountsController < ApplicationController
 
         Docuseal.refresh_default_url_options!
       end
+    end
 
     with_locale do
       redirect_to settings_account_path, notice: I18n.t('account_information_has_been_updated')