SERVER-11331 Fix access control check for createRole