issue #19272: enforce canCreate