null privileges means no grant to create
Merge branch 'hotfix/collection-authorization'

Fixes issue when no privileges are setup for a given resource (essentially, no
grant (allow|deny) should be made).