diff --git a/lib/models/user.js b/lib/models/user.js
index 639d383d..6e264b74 100644
--- a/lib/models/user.js
+++ b/lib/models/user.js
@@ -90,7 +90,13 @@ var options = {
       principalId: Role.OWNER,
       permission: ACL.ALLOW,
       property: "updateAttributes"
-    }
+    },
+     {
+      principalType: ACL.ROLE,
+      principalId: Role.EVERYONE,
+      permission: ACL.ALLOW,
+      property: "confirm"
+     }
   ],
   relations: {
     accessTokens: {