Fix Scenario creation permissions

Fixes #366 and #367 .