diff --git a/app/controllers/api/restful_controller.rb b/app/controllers/api/restful_controller.rb
index 77edd69f..8ecad963 100644
--- a/app/controllers/api/restful_controller.rb
+++ b/app/controllers/api/restful_controller.rb
@@ -7,9 +7,9 @@ class API::RestfulController < ActionController::Base
   load_and_authorize_resource only: [:show, :update, :destroy]
 
   def create
-    authorize resource_class
     instantiate_resource
     resource.user = current_user
+    authorize resource_class
     create_action
     respond_with_resource
   end