Ensure that create_obj is run before the permissions enforcers
fix permissions check in purge.