To duplicate, it must be able to edit/read the oldObject, and be granted to create (and duplicate if the user want to be fine grained)
Differentiate between duplicate and create in controller and views