Vaidate the user have access to create box.