From a1efb2d86aaec86f8e07e1c24c2cc854dd5bca17 Mon Sep 17 00:00:00 2001
From: Francis Cao <franciscao@gmail.com>
Date: Thu, 22 Jan 2026 11:53:11 -0800
Subject: [PATCH] check for explicit teamCreate permissions for global role in
 canCreateTeam

---
 src/permissions/team.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/permissions/team.ts b/src/permissions/team.ts
index 0f07c1a4..784dbe4b 100644
--- a/src/permissions/team.ts
+++ b/src/permissions/team.ts
@@ -16,7 +16,7 @@ export async function canCreateTeam({ user }: Auth) {
     return true;
   }
 
-  return !!user;
+  return hasPermission(user.role, PERMISSIONS.teamCreate);
 }
 
 export async function canUpdateTeam({ user }: Auth, teamId: string) {