users/sign-up is working despite being disabled

I have the "Sign-up disabled" option deselected,

but I can still navigate to https://my.domain.com/users/sign_up.

To see how far it would go, I tried setting up a fake user, and it quickly showed an error banner:

An error occurred while validating username

It allowed me to complete the form and returned to the login page. The test user did not receive an email nor did the attempted new-account login work (both are good things). The new user does not show up in the list of users. The admin (me) did not receive an email that a new-user request was attempted. I'm fine with not getting a notification, just giving context here.

The rails console command does not change the behavior:

(Re-tested the users/sign-up page, it's still there.)

I don't intend to allow new users to create new accounts.

This issue might be one of two things:

1. if the intent is to keep the page there but do nothing with the requests (reroute to devnull, for instance), that's fine, I think documenting that it can be disabled but will still look like it's possible.
2. if the intent is that the page should not be returned if disabled, then it is a bug that the page renders (though "whew" that it is not allowing new accounts to be created).

Thanks!

---

gitlab-ce 18.5.2 via docker on ubuntu 24.04.3