[minor] check create permission separately